dandri/i2p.i2p
1
0
Fork 0
mirror of https://github.com/i2p/i2p.i2p.git synced 2026-10-02 23:38:43 +00:00
Code Issues Packages Projects Releases Wiki Activity
18,552 Commits 1 Branch 323 Tags
2ee50bcd49f2eeb61cd342fc97a1ecff41f41f4f
Commit Graph
18552 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
idk 2ee50bcd49 Merge pull request #173 from Nick2k4L/fix/V-39-XSS-Tunnel-Fields 
Fix: V-39-XSS
 2026-09-21 16:45:15 -04:00
Nicholas Lopez 5052d62293 Add: escape necessary fields within beans. 2026-09-21 09:16:01 -07:00
zzz 83e4f326f9 i2psnark: Fix file priorities lost after startup check (GH #170) 2026-09-19 09:24:49 -04:00
zzz 17317f81cd streaming: Mark window size option methods unused 2026-09-17 08:23:25 -04:00
zzz 8af94b9e4a Tunnels: Don't process dup fragments 
Reported by: Tim C
 2026-09-16 10:09:44 -04:00
zzz 4c3d10c124 Tunnels: Limit size of fragment reassembly map 
Reported by and fix adapted from: Tim C
 2026-09-16 09:27:13 -04:00
zzz 8fbfb70fbd i2pcontrol: Log and delay on auth failure 
Reported by: Tim C
 2026-09-16 06:54:43 -04:00
zzz 6440d5f169 crypto: make EdDSA sig comparison constant time 
Reported by: Tim C
 2026-09-16 06:27:04 -04:00
zzz 73819404c5 crypto: make AES operation constant time 
in deprecated/unused method

Reported by: Tim C
 2026-09-16 06:25:24 -04:00
zzz 1717ec6656 i2psnark: Limit max reported peers 
to protect against tracker bugs
 2026-09-16 06:23:53 -04:00
zzz f3a062ed58 i2psnark: Extend keepalive interval 
from 30 to 60s, only send on inactivity
 2026-09-15 12:28:37 -04:00
zzz 31e5c12cfd Transport: Partial impl for force-ipv6 for docker bridge (WIP) 
tested only to not break ipv6;
untested on real docker bridge;
more to follow
 2026-09-15 09:25:36 -04:00
zzz 0631193025 Transport: Add explicit force-ipv6 enum (WIP) 2026-09-14 09:10:36 -04:00
zzz 6bac29bd0c Transport: Add explicit force-ipv6 case for clarity 2026-09-14 09:08:05 -04:00
zzz ee4d8c5818 Transport: Stub out NATPMP enums (WIP) 2026-09-14 09:07:23 -04:00
zzz 418c455bbc Router: Update cert and re-enable new reseed 2026-09-14 07:29:21 -04:00
zzz e2026a25d5 i2psnark: Add all trackers to magnet links 2026-09-13 13:42:37 -04:00
zzz 6ce31b3424 i2psnark: Set next announce based on last response time 
not request time, so failures get retried faster
 2026-09-13 11:57:11 -04:00
zzz 402641a20e i2psnark: Change backup tracker to UDP 
and add to tracker list
 2026-09-13 11:27:43 -04:00
zzz cff95a34cc susidns: CSS tweak 
user-select: all for dest on details page
 2026-09-10 09:25:43 -04:00
zzz 77f882768c bump -6 2026-09-10 08:52:28 -04:00
zzz 3f17761c86 i2psnark: Restore 2-arg getNameAndInfoHash() 
used by i2psnark-rpc plugin
 2026-09-09 15:00:39 -04:00
zzz 2f0fb93e83 i2psnark: Request throttle adjustments 
recent changes put us well over the limits;
allow maxPipeline to go to zero again,
and remove the 10% higher request limit.
 2026-09-09 14:21:38 -04:00
zzz 78529310ff i2psnark: Use uppercase for infohash in magnet names 2026-09-08 14:40:34 -04:00
zzz b12dfad938 i2psnark: Improve path traversal checks part 3 
Remove check for / in name in MetaInfo throwing exception,
now handled gracefully in Storage
 2026-09-08 13:51:38 -04:00
zzz 0d801ffc99 i2psnark: Improve path traversal checks part 2 
Reported by: haoxucu
 2026-09-04 10:34:41 -04:00
zzz b6ce258986 i2psnark: Improve path traversal checks 
Reported by: haoxucu
 2026-09-04 09:51:50 -04:00
zzz a884b90934 Addressbook: Check for dest mismatch in action=update 
to prevent subscription feed from replacing destination on existing key,
update is only for changing metadata, per the feed spec.

Reported by: haoxucu
 2026-09-04 09:08:09 -04:00
zzz ff63e0cdff i2ptunnel: Fix SOCKS 4/4a downgrade bypass of proxy auth 
The guard meant to reject SOCKS 4/4a on auth-enabled tunnels checked for legacy
proxyUsername/proxyPassword properties that are no longer used for SOCKS,
we now store sha256 digest under different properties,
so when auth is enabled, a unauthenticated SOCKS 4a CONNECT was accepted.

Fix by removing check for legacy properties.

Reported by: haoxucu
 2026-09-04 08:33:20 -04:00
zzz 641f06f48d i2psnark: Catch unbounded bdecode recursion 
BDecoder applies no recursion limit to untrusted bencode,
so a large nested list or map produces a StackOverflowError
that passes through every catch(Exception) guard on the receive path
and terminates the shared I2P session dispatcher thread.

Fix by declaring and catching Throwable everywhere.

Reported by: haoxucu
 2026-09-04 08:07:23 -04:00
zzz d2392ae9b7 SAM: Fix DG2/3 subsessions 
listening for the wrong protocol.

Reported by and fix adapted from: InsulaOcculta
 2026-09-04 07:10:23 -04:00
zzz 2c3fd2a953 i2psnark: Add js audio playlist controls 
resurrected and completed from snark-playlist branch (2024)
 2026-09-02 15:01:38 -04:00
zzz 10a804a988 i2psnark: Build fix from previous checkin, 
prep for js
 2026-09-02 13:24:29 -04:00
zzz 7ed03f4f0d i2psnark: Increase min completion for audio preview 2026-09-02 11:12:02 -04:00
zzz 2b78495abf i2psnark: Add loading directives for HTML 5 elements 2026-09-02 08:18:27 -04:00
zzz 094624f099 i2psnark: Stop FetchAndAdd if not enough space 2026-09-01 11:32:32 -04:00
zzz d34dbd106f i2psnark: Check available space when adding torrent files 2026-09-01 10:57:44 -04:00
zzz 0a1a95709c i2psnark: Send sorted dictionaries in extensions as required by spec 2026-08-31 18:39:32 -04:00
zzz b06f550843 i2psnark: Check available disk space when magnet has xl param 2026-08-31 18:07:32 -04:00
zzz ec491969a1 i2psnark: Don't NPE on missing map in extension handshake 2026-08-31 17:35:40 -04:00
zzz a2b7a37429 reseed update 
- add new reseed
- disable new reseed that changed keys and hasn't submitted new cert
 2026-08-31 07:58:06 -04:00
zzz 9195a94a47 bump -5 2026-08-31 07:20:17 -04:00
zzz 44999aa56d I2CP: API interface javadoc clarifications 2026-08-30 12:33:31 -04:00
zzz 00cf0d2eed i2psnark: Clip long magnet links on details page 2026-08-29 13:45:47 -04:00
zzz 40ad52987f Router: Ensure log gzipper finishes after shutdown signal 2026-08-29 12:17:50 -04:00
zzz d4db8fbb50 i2psnark: Validation fix for UDP URLs without a path part 2 
and remove ancient "i2p" hostname check
 2026-08-29 11:33:53 -04:00
zzz d5ba2e7ddc i2psnark: Default tracker type to open on add tracker form 2026-08-29 08:18:48 -04:00
zzz 1df04c927a i2psnark: Show free disk space on add torrent form 2026-08-29 07:23:11 -04:00
zzz 345c228129 i2psnark: Allow adding udp tracker URLs without a path on config form 2026-08-28 17:51:58 -04:00
zzz bb6d329279 i2snark: Show all magnet link trackers on details page after 
transition out of magnet mode. Part 3/3
 2026-08-28 15:55:42 -04:00