#314 |
DNS tricks to connect clients to their own (local) node
|
|
enhancement
|
major
|
0.7.0
|
wontfix
|
#552 |
the "webdrive" javascript frontend moves objects with delete-before-add
|
|
defect
|
major
|
1.2.0
|
somebody else's problem
|
#553 |
"More Info" link should point to a file/dir, not a dir+childname
|
zooko
|
defect
|
major
|
1.2.0
|
fixed
|
#672 |
'DirectoryAsHTML' object has no attribute 'dirnode_children_error'
|
francois
|
defect
|
major
|
1.3.0
|
cannot reproduce
|
#844 |
Support ETags for immutable files in web front-end
|
|
enhancement
|
major
|
1.5.0
|
invalid
|
#861 |
Any node interface available on a public exposes confidential grid info
|
somebody
|
defect
|
major
|
1.5.0
|
duplicate
|
#887 |
twisted.web logs the uri on some exceptional conditions, leading to a privacy leak in logfiles
|
nobody
|
defect
|
major
|
1.4.1
|
duplicate
|
#921 |
iTunes refuses to stream music from 127.0.0.1
|
zooko
|
defect
|
major
|
1.5.0
|
cannot reproduce
|
#950 |
upload doesn't appear in the Recent Uploads Downloads page
|
|
defect
|
major
|
1.6.0
|
duplicate
|
#1058 |
DELETE /uri/$DIRCAP/[SUBDIRS../]CHILDNAME to free space
|
|
defect
|
major
|
1.5.0
|
invalid
|
#1206 |
node status page does not indicate per server if it is taking shares
|
|
enhancement
|
major
|
1.8β
|
duplicate
|
#1523 |
MDMF upload via web-API uses much more memory in the gateway process than expected
|
davidsarah
|
defect
|
major
|
1.9.0a1
|
duplicate
|
#1673 |
WUI lacks ability to check how directory was created
|
|
defect
|
major
|
1.9.1
|
duplicate
|
#3312 |
Web UI can't do directory operations
|
sajith
|
defect
|
major
|
n/a
|
fixed
|
#1857 |
Add public gateway permalinks to web api
|
|
enhancement
|
normal
|
1.9.2
|
wontfix
|
#1858 |
Add redirect_to_index_html boolean to [client]
|
|
enhancement
|
normal
|
unknown
|
wontfix
|
#1861 |
redirects in tahoe should not point to other origins
|
ChosenOne
|
enhancement
|
normal
|
1.9.2
|
wontfix
|
#1868 |
rename "uri" to "cap" everywhere
|
davidsarah
|
defect
|
normal
|
1.9.2
|
duplicate
|
#1911 |
Add authentication for WUI access
|
luckyredhot
|
enhancement
|
normal
|
1.9.2
|
wontfix
|
#1962 |
the download visualization is hard to discover
|
|
defect
|
normal
|
1.10.0
|
duplicate
|
#1993 |
Abuse of HTTP status 410 Gone
|
|
defect
|
normal
|
1.10.0
|
duplicate
|
#2299 |
WUI links to pages using configured port
|
|
defect
|
normal
|
1.10.0
|
duplicate
|
#2476 |
add JSON encoding of information from Welcome page
|
dawuud
|
defect
|
normal
|
1.10.1
|
fixed
|
#2771 |
upcoming deprecation in webish.py
|
GitHub <noreply@…>
|
defect
|
normal
|
1.11.0
|
fixed
|
#2893 |
Refactor redundant `?t=json` handling code
|
GitHub <noreply@…>
|
enhancement
|
normal
|
1.12.1
|
fixed
|
#3265 |
Re-use/keep alive single storage plugin web resource
|
|
enhancement
|
normal
|
n/a
|
fixed
|
#3786 |
Add OpenMetrics-format endpoint for scraping with Prometheus
|
hacklschorsch
|
enhancement
|
normal
|
unknown
|
fixed
|
#102 |
smaller and prettier directory URIs
|
zooko
|
enhancement
|
minor
|
0.7.0
|
fixed
|
#228 |
more REST-ful PUT web interfaces (Content-Type: instead of t=)
|
|
task
|
minor
|
0.7.0
|
wontfix
|
#557 |
Potential XSS vulnerability when using JSON
|
|
defect
|
minor
|
1.2.0
|
invalid
|
#626 |
The wapi ought to cope with slashes
|
warner
|
defect
|
minor
|
1.3.0
|
invalid
|
#692 |
(patch) improve appearance of welcome and directory pages
|
zooko
|
enhancement
|
minor
|
1.4.1
|
fixed
|
#1413 |
Size column in WUI directory listings should be right-justified
|
|
defect
|
minor
|
1.8.2
|
duplicate
|
#1481 |
update docs/frontends/webapi.rst
|
zancas
|
enhancement
|
minor
|
1.8.2
|
invalid
|
#1632 |
WUI should show the type of each subdirectory
|
|
defect
|
minor
|
1.9.0
|
duplicate
|
#1969 |
logo.png is not found in allmydata-tahoe as installed via easy_install and pip
|
|
defect
|
minor
|
1.10.0
|
fixed
|
#2041 |
Improve JSON layout
|
daira
|
defect
|
minor
|
1.10.0
|
wontfix
|
#3975 |
Conditional that could always be truthy.
|
daniellee
|
defect
|
minor
|
n/a
|
fixed
|
#3976 |
Name of variable is same as built in.
|
daniellee
|
defect
|
minor
|
n/a
|
fixed
|
#48 |
XML-RPC interface
|
nobody
|
enhancement
|
trivial
|
|
wontfix
|
#529 |
Implement Halt and Catch Fire
|
|
defect
|
major
|
1.2.0
|
|
#784 |
explain what the "Report an incident" button does
|
|
enhancement
|
major
|
1.5.0
|
|
#823 |
WUI server should have a disallow-all robots.txt
|
|
defect
|
major
|
1.5.0
|
|
#825 |
Cannot use WUI to upload a file with a name different to its name in the local filesystem
|
|
enhancement
|
major
|
1.5.0
|
|
#857 |
Make operation-handle-querying use only a little memory
|
nobody
|
defect
|
major
|
1.5.0
|
|
#906 |
ETag support for mutable files and directories
|
|
defect
|
major
|
1.5.0
|
|
#995 |
It's way too easy to give away write directory caps
|
nobody
|
defect
|
major
|
1.6.0
|
|
#997 |
The webapi/WUI should have https enabled by default
|
nobody
|
defect
|
major
|
1.6.0
|
|
#1029 |
download a subtree as an archive
|
|
enhancement
|
major
|
1.6.1
|
|
#1047 |
Upload failures should report useful HTTP status lines
|
nobody
|
enhancement
|
major
|
1.6.1
|
|
#1048 |
Expected exceptions should not include tracebacks
|
|
enhancement
|
major
|
1.6.1
|
|
#1132 |
browser protocol handler or plugin for Tahoe URIs
|
|
enhancement
|
major
|
1.7.1
|
|
#1142 |
Unlikely XSS Potential in File Names in WUI
|
nobody
|
defect
|
major
|
1.7.1
|
|
#1144 |
Loopy/Uninhibited/Overlarge Filename Makes Web Server Crump
|
nobody
|
defect
|
major
|
1.7.1
|
|
#1215 |
add CORS support
|
|
enhancement
|
major
|
1.8.0
|
|
#1221 |
operation stats are not sufficient to understand what's wrong
|
|
defect
|
major
|
1.8.0
|
|
#1369 |
allow static HTML files to be transcluded into WUI Welcome and directory listing pages
|
|
defect
|
major
|
1.8.2
|
|
#1550 |
new/alternate download visualizer
|
drewp
|
enhancement
|
major
|
1.9.0a2
|
|
#1665 |
Brainstorm webapi vulnerabilities between the operator and a user and between users.
|
|
task
|
major
|
n/a
|
|
#1859 |
Proof-of-concept attack: Upload and execute attacker controlled js from any domain.
|
davidsarah
|
defect
|
major
|
1.9.2
|
|
#1904 |
filenames leak into log files from rename (and other web-API operations that take filenames)
|
|
defect
|
major
|
1.9.2
|
|
#2125 |
don't cache failures!
|
|
defect
|
major
|
1.10.0
|
|
#2385 |
node web server should use DHE/ECDHE suites automatically
|
j3i
|
enhancement
|
major
|
1.10.0
|
|
#3852 |
500 error from JSON welcome page
|
|
defect
|
major
|
n/a
|
|
#3929 |
Error reading directory: 'coroutine' object has no attribute 'addCallback'
|
|
defect
|
major
|
unknown
|
|
#451 |
webdav frontend
|
|
enhancement
|
normal
|
1.0.0
|
|
#1375 |
the performance stats for each upload or download are undiscoverable
|
tarcieri
|
defect
|
normal
|
1.8.2
|
|
#1541 |
Add ?t=xml parameter for getting file statistics
|
bibilthaysose
|
enhancement
|
normal
|
1.9.0a1
|
|
#1706 |
The "Report!" button in the "Report an Incident" form field redirects to a misleading/incomplete message
|
zancas
|
defect
|
normal
|
1.9.1
|
|
#1709 |
order nodes by nickname instead of peerid on the welcome page
|
|
enhancement
|
normal
|
1.9.1
|
|
#1799 |
Document how to distinguish exceptions from JSON, or encode exceptions as JSON
|
|
defect
|
normal
|
1.9.2
|
|
#1809 |
WUI: upload to directory fails due to no file name
|
|
defect
|
normal
|
1.9.2
|
|
#1846 |
add "started" timestamp on the current operations on Recent Uploads and Downloads
|
|
defect
|
normal
|
1.9.2
|
|
#1895 |
implement replace=false for file upload into a mutable directory
|
davidsarah
|
defect
|
normal
|
1.9.2
|
|
#1912 |
show miniature live view of recent activity right on the front page
|
drewp
|
enhancement
|
normal
|
1.9.2
|
|
#1914 |
tahoe check reports incorrect encoding
|
|
defect
|
normal
|
1.9.2
|
|
#1967 |
make new WUI work on phone
|
|
defect
|
normal
|
1.10.0
|
|
#2031 |
Optionally serve ./docs from the web gateway.
|
|
enhancement
|
normal
|
1.10.0
|
|
#2070 |
WUI: what's the difference between "Immutable" and "SDMF"?
|
|
defect
|
normal
|
1.10.0
|
|
#2093 |
State-mutating GET methods in webapi.
|
daira
|
defect
|
normal
|
1.10.0
|
|
#2117 |
Valid helper makes "Connected to Q of R" irrelevant for upload success
|
daira
|
enhancement
|
normal
|
1.10.0
|
|
#2126 |
send application/json content-type for JSON response
|
|
defect
|
normal
|
1.10.0
|
|
#2136 |
Use Content-Security-Policy to harden the WUI
|
daira
|
defect
|
normal
|
1.10.0
|
|
#2142 |
How to enhance WebUI default security against capability eavesdropping?
|
amontero
|
enhancement
|
normal
|
1.10.0
|
|
#2143 |
Adding aliases to the WUI
|
daira
|
enhancement
|
normal
|
|
|
#2225 |
allow themeing of WUI
|
|
enhancement
|
normal
|
1.10.0
|
|
#2227 |
"format=mutable" in the web API
|
|
enhancement
|
normal
|
1.10.0
|
|
#2532 |
storage server running 1.10.2 shows 2^64 bytes available to clients
|
|
defect
|
normal
|
1.10.1
|
|
#2590 |
GET /operations/$HANDLE?output=json is not JSON
|
|
defect
|
normal
|
1.10.1
|
|
#2716 |
Exception on WUI
|
|
defect
|
normal
|
1.10.2
|
|
#2720 |
format_http_error leaks the URI
|
daira
|
defect
|
normal
|
1.10.2
|
|
#2724 |
use humanize library
|
daira
|
defect
|
normal
|
1.10.2
|
|
#2778 |
add server-info pages to WUI, link there from upload/download status pages and Welcome page
|
|
enhancement
|
normal
|
1.11.0
|
|
#2822 |
remove redundant read from web GET of directory
|
|
defect
|
normal
|
1.11.0
|
|
#2839 |
make statistics of (past) uploads available as JSON
|
|
enhancement
|
normal
|
1.11.0
|
|
#3041 |
Testing of websocket logs
|
|
defect
|
normal
|
1.12.1
|
|
(more results for this group on next page)
|