emanuele-f
3a1728414d
Redirect to login when session expires
2018-03-27 15:16:30 +02:00
Luca Deri
f0c936c368
Updated (C) to 2018
2018-03-22 21:59:42 +01:00
emanuele-f
99b67b16ad
Remove old nedge define and move to new one
2018-02-09 13:01:08 +01:00
Simone Mainardi
74a5ac644d
Fixes issues when serving static content (e.g., css)
2018-01-25 18:45:08 +01:00
emanuele-f
6102f42f53
Block captive portal users ntopng web login
2018-01-25 14:14:08 +01:00
Simone Mainardi
aa11e532e1
Fixes nEDGE captive portal ssl redirection
2018-01-17 12:41:34 +01:00
Luca Deri
c9ecd931d9
Code cleanup
2017-12-16 08:23:56 +01:00
Luca Deri
b5ad7ebfce
Fixed invalid termination sequence that might have lead to crash during termination
2017-11-12 12:40:03 +01:00
emanuele-f
4a17ab7047
Improve licence expire message
2017-10-27 13:06:23 +02:00
Luca Deri
b6c7f08eb5
Updates for systemd
...
Added checks for end demo mode
2017-10-22 19:52:26 +00:00
Luca Deri
20b3c74ada
Implemented support for ntop custom lua loadfile
...
Packaging changes for nedge
2017-10-22 18:43:21 +02:00
Luca Deri
c8de202017
Fixes to compile ntopng without MySQL
...
Added nEdge support in configure
2017-10-21 13:39:18 +02:00
emanuele-f
501ee043b0
Fix splash port check
2017-10-19 13:52:41 +02:00
Luca Deri
86613c081b
Login bug fix
2017-10-16 14:01:29 +02:00
Luca Deri
420ce53060
Added support for HTTP splash port
2017-10-16 07:57:32 +02:00
Luca Deri
4b01406137
Improved fingerprinting support
...
Disabled HTTP banned page support as in the current implementation is ambiguous
Fixed flow parsing leak
2017-10-15 07:46:20 +02:00
Luca Deri
892bfe94a7
Fixrd issues with HTTP refers
2017-10-13 23:04:14 +02:00
Luca Deri
dcf27be459
Improved banned page support
2017-10-13 07:18:52 +02:00
Luca Deri
27afad6072
Refined ban support
2017-10-12 18:46:22 +02:00
Luca Deri
cfce50b986
Added support for banned sites detection with splash screen
2017-10-12 17:56:52 +02:00
emanuele-f
0c0b252297
Use 'Secure' attribute for cookies when using HTTPS
...
Note: insecure cookies are still permitted when running HTTP. In this case, user should add -w0 to disable HTTP.
2017-09-26 19:45:09 +02:00
Simone Mainardi
c4a6ddd3a4
Implements bridge configuration via HTTP
2017-08-16 18:09:33 +02:00
Simone Mainardi
8af4bb14c9
License info to command line
2017-07-26 19:19:21 +02:00
Simone Mainardi
b216d4bd3b
Minor grafana fixes
2017-07-13 19:49:00 +02:00
Luca
be64fc6865
Fixed bug that prevented HTTP to be redirected to SSL (if enabled)
2017-06-22 16:06:13 -04:00
emanuele-f
fb3d212479
Little changes
2017-06-09 21:38:05 +02:00
Simone Mainardi
c115271c5d
Implements grafana support for interfaces
2017-06-07 19:02:28 +02:00
Simone Mainardi
5780d0f543
Implements Captive Portal over SSL
2017-06-01 19:30:07 +02:00
Simone Mainardi
8b72652a5d
Fixes buffer size for HTTP binding
...
Fixes:
29/May/2017 08:50:41 [HTTPserver.cpp:818] HTTP server listening on port(s) 172.16.0.1:80,172.16.0.1:300
2017-05-29 08:53:58 +02:00
Luca Deri
7cdff93fef
Added the method to bind the GUI to an IP other than the loopback
...
Fixed bug that, in case o binding address, was not binding the alternate port (but jsut the main one) to the specified address
2017-05-28 22:43:54 +02:00
Luca Deri
ae0556b874
Minor optimization to avoid scanning a list twice
2017-05-28 22:13:39 +02:00
Simone Mainardi
fe90b4b4f6
Fixes for HTTP 1.0/1.1 Host: header
2017-05-28 11:42:15 +02:00
emanuele-f
ffa39896eb
Add interface check in captive portal login
2017-05-25 18:21:21 +02:00
emanuele-f
011b7f5cdf
Force default admin password change
2017-04-27 21:15:58 +02:00
Josh Soref
78e78c018c
Fixes spellings and typos
...
Thank goes to
Josh Soref <jsoref@users.noreply.github.com>
2017-03-06 17:54:48 +01:00
Luca Deri
4f9be59513
Fixed invalid variable form name user -> username
2017-02-26 22:10:29 +01:00
Luca Deri
b37f141e2e
Defined wildcarded hello host
2017-02-04 16:52:38 +00:00
Luca Deri
7866c90500
Optimizations on the captive portal
2017-02-03 17:26:44 +01:00
Simone Mainardi
9469e58f07
Security fixes (HTTP splitting attacks)
...
Prevents \r\n from being injected into HTTP URIs. An attacker
could exploit this injection to break an HTTP request in more parts.
2017-01-30 17:15:48 +01:00
Simone Mainardi
696c906df2
Implements lifetime in seconds
2017-01-25 23:31:58 +01:00
Luca Deri
7e384d3c18
Added the ability to activate the web HTTP port on two ports. Example -w 80,3000
...
Changes in the captive portal logic that made it compatible with Android
Updated bridging readme to include the latest changes
2017-01-25 22:44:34 +01:00
Luca Deri
e2411a5445
Reworked captive portal code
2017-01-25 00:28:14 +01:00
Luca Deri
0eaccfe00b
Added the ability to specify in preferences -> logging the path file
...
for logging HTTP accesses
2017-01-24 17:16:02 +01:00
Luca Deri
93705cedcd
Kindle captive portal improvememts
2017-01-24 01:53:43 +01:00
Luca Deri
447bf431c5
Login improvements
2017-01-23 01:47:22 +01:00
Luca Deri
6205d88f56
Added support in captive portal for iOS and Kindle devices
...
Created minimal header for speeding up load of login pages
2017-01-23 01:29:34 +01:00
Luca Deri
90ba154306
Captive portal enhancements
2017-01-22 11:01:57 +01:00
Luca Deri
bfa78e73f2
Improvements for captive portal
...
Changed CSRF policy: when not valid, form parameter are ignored. This way the form is still valid (no CSRF errror anymore) but the action has no effect and the user has to resubmit the form after it expired
2017-01-21 01:08:18 +01:00
Luca Deri
e423d8c94c
Displayed host pool in host detail page
...
Fixed bug in redis that was not properly reporting the return code on some commands (e.g SADD)
Changes for captive portal implementation
2017-01-20 00:43:44 +01:00
Luca Deri
c6e21b7f6e
Improvements on AddressTree
...
Initial support of captive portal on HTTP server
2017-01-19 19:14:20 +01:00