mirror/Spark
3
0
Fork 0
mirror of https://github.com/igniterealtime/Spark.git synced 2025-10-29 11:47:01 +00:00
Code Issues Projects Releases Wiki Activity
4,342 Commits 14 Branches 30 Tags
Commit Graph

4342 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
ilyaHlevnoy
2084aa8e2b
add ARM installer (#744) 2022-10-09 19:20:20 +03:00
ilyaHlevnoy
648afb5178
Wrong flag in Windows with JRE (#743) 2022-10-08 10:43:27 +03:00
ilyaHlevnoy
209a4cfe03
Merge pull request #742 from igniterealtime/install4j-msi 
SPARK-1795 SPARK-2296 MSI installer for Windows and add localizations in install4j installer
 2022-10-07 22:51:59 +03:00
ilyaHlevnoy
d26b96b114 add localizations in install4j installer 2022-10-07 18:24:49 +03:00
ilyaHlevnoy
1806645f94 add MSI installers for Windows 2022-10-07 17:56:00 +03:00
ilyaHlevnoy
86e2763d1d
Update install4j-runtime to 10.0.3 (#741) 2022-10-06 20:46:45 +03:00
ilyaHlevnoy
e938c2b8c9
Install4j 64-bit Setup doesn't uninstall previous 32-bit Version (#739) 
Spark 64bit should uninstall past versions of Spark 32bit and vice versa

https://stackoverflow.com/questions/57557144/install4j-64-bit-setup-doesnt-uninstall-previous-32-bit-version
 2022-10-06 19:06:25 +03:00
ilyaHlevnoy
b2df5d48d4
Update install4j to 10version and add Spark 64bit without JRE SPARK-2276 SPARK-2016 (#738) 
* Migrate 6.1.4 to 10.0.3

* add 64bit without JRE
 2022-10-05 23:35:35 +03:00
ilyaHlevnoy
6294a2d3b4
Add Java Bit Information (#737) 2022-10-05 22:26:04 +03:00
ilyaHlevnoy
bb0d0a7dbd
SPARK-2115 SPARK-2295 Allow change password for unsecurity connection (#736) 
* SPARK-2115 SPARK-2295 Allow change password for unsecurity connection

* AccountCreationWizard  should use Spark TrustManager

* Add more information about connection error.
 2022-10-02 19:04:11 +03:00
ilyaHlevnoy
2db51a86a3
SPARK-2295 Unable to create an account through Spark (#735) 2022-10-01 21:05:50 +03:00
ilyaHlevnoy
ff216bfd57
SPARK-2125 Bookmarks should be sorted alphabetically (#734) 2022-10-01 16:45:48 +03:00
ilyaHlevnoy
35bbdae1eb
SPARK-2250 SPARK-2223 Fix getting server name (#733) 2022-09-30 19:08:56 +03:00
ilyaHlevnoy
073a5b34e3
SPARK-2250 SPARK-2223 Load history and don't save MUC (#730) 
1.We must user JID(fullname) for save and load history
2.When loading history we must use:
a)LocalPart for contacts that are not in user list.
b)ResourcePart for private messages in MUC
3.Jid.asUrlEncodedString() path is not displayed correctly
 2022-09-29 21:49:41 +03:00
ilyaHlevnoy
19833cf812
SPARK-2294 UI freezes when accepting a room invite (#732) 2022-09-29 17:10:55 +03:00
ilyaHlevnoy
7145765ae1
Update FlatLaf to 2.5 (#731) 2022-09-28 14:00:05 +03:00
ilya khlevnoy
8196830223 Revert "fix display name contact is not in the list of users. (#726)" 
This reverts commit d49f5c1b6dc47bcdd677213c6c63d2475efa4721.
 2022-09-26 19:49:11 +03:00
ilyaHlevnoy
3a96de034d
improve log window (#729) 2022-09-25 20:39:18 +03:00
ilyaHlevnoy
63ad251bc5
SPARK-2291 refactoring code (#728) 2022-09-25 19:28:04 +03:00
Jonathan Leitschuh
1a41205f5b
vuln-fix: Zip Slip Vulnerability (#719) 
This fixes a Zip-Slip vulnerability.

This change does one of two things. This change either

1. Inserts a guard to protect against Zip Slip.
OR
2. Replaces `dir.getCanonicalPath().startsWith(parent.getCanonicalPath())`, which is vulnerable to partial path traversal attacks, with the more secure `dir.getCanonicalFile().toPath().startsWith(parent.getCanonicalFile().toPath())`.

For number 2, consider `"/usr/outnot".startsWith("/usr/out")`.
The check is bypassed although `/outnot` is not under the `/out` directory.
It's important to understand that the terminating slash may be removed when using various `String` representations of the `File` object.
For example, on Linux, `println(new File("/var"))` will print `/var`, but `println(new File("/var", "/")` will print `/var/`;
however, `println(new File("/var", "/").getCanonicalPath())` will print `/var`.

Weakness: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Severity: High
CVSSS: 7.4
Detection: CodeQL (https://codeql.github.com/codeql-query-help/java/java-zipslip/) & OpenRewrite (https://public.moderne.io/recipes/org.openrewrite.java.security.ZipSlip)

Reported-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com>

Bug-tracker: https://github.com/JLLeitschuh/security-research/issues/16

Co-authored-by: Moderne <team@moderne.io>

Co-authored-by: Moderne <team@moderne.io>
 2022-09-25 19:25:03 +03:00
ilyaHlevnoy
295a53fe09
SPARK-2266 Always accepts self-signed certificates (#692) 
I think with a self-signed certificate, an exception should be thrown in order to get into the catch block.
 2022-09-25 17:28:47 +03:00
ilyaHlevnoy
c9eb289459
fix "null" name in history (#727) 2022-09-25 17:18:21 +03:00
ilyaHlevnoy
d49f5c1b6d
fix display name contact is not in the list of users. (#726) 2022-09-25 17:17:32 +03:00
ilyaHlevnoy
a1c97317a1
broadcast must use a nickname (#725) 2022-09-24 13:50:53 +03:00
ilyaHlevnoy
7907e9cd60
SPARK-2208 Fix search result (#724) 
* fix search result

* remove unused import
 2022-09-24 13:49:34 +03:00
ilyaHlevnoy
8a28722937
Merge pull request #723 from igniterealtime/broadcastWithPanel 
SPARK-2288 Fix BroadcastPane
 2022-09-18 23:15:07 +03:00
ilya khlevnoy
a342a753c8 Add text scroll 2022-09-18 22:49:36 +03:00
ilya khlevnoy
9c634c38c5 set line break in text 2022-09-18 12:43:14 +03:00
ilya khlevnoy
6de68baf1f Fix text selection in jtextPane 2022-09-18 12:12:53 +03:00
ilyaHlevnoy
a7532a9e20
Merge pull request #722 from igniterealtime/SPARK-2218 
SPARK-2218 broadcast message is not displayed on startup
 2022-09-17 21:40:42 +03:00
ilya khlevnoy
978416ce65 broadcast message is not displayed on startup 2022-09-17 21:05:26 +03:00
ilyaHlevnoy
e30fa67a7a
Merge pull request #721 from igniterealtime/spark-1908 
SPARK-1908 Offline message is not added to the history until chat window is closed
 2022-09-10 17:37:54 +03:00
ilya khlevnoy
f3382df623 SPARK-1908 Offline message is not added to the history until chat window is closed 2022-09-10 14:38:12 +03:00
ilyaHlevnoy
89f20f14aa
Merge pull request #720 from igniterealtime/spark-2228 
SPARK-2228 When chat window is maximized emoticons selection window goes beyond taskbar
 2022-09-10 12:21:29 +03:00
ilya khlevnoy
5c1579460e SPARK-2228 When chat window is maximized emoticons selection window goes beyond taskbar 2022-09-10 12:19:18 +03:00
ilyaHlevnoy
b4b4d9ad76
Merge pull request #716 from igniterealtime/ask-close-unread-chat 
SPARK-1598 Add an option to ask for confirmation when closing conversation window with multiple chats
 2022-09-09 22:39:02 +03:00
ilyaHlevnoy
7a87274abd
Merge pull request #715 from igniterealtime/spark2144 
SPARK-2098 SPARK-2144 Add a button to restart Spark if network error happens
 2022-09-09 22:37:48 +03:00
ilya khlevnoy
48c9cb4640 Update translations 2022-09-09 22:33:55 +03:00
ilyaHlevnoy
b332981f10
Merge pull request #718 from igniterealtime/spark-2285 
SPARK-2285 User can open chat with dummy@dummy.example
 2022-09-05 21:45:01 +03:00
ilya khlevnoy
d9a2b754c0 SPARK-2285 User can open chat with dummy@dummy.example 
User can open chat with dummy@dummy.example and also when hovering the cursor, a window with contact information is displayed.
 2022-09-05 21:42:03 +03:00
ilyaHlevnoy
d522167991
Merge pull request #717 from igniterealtime/Plyha-patch-1 
Update README.md
 2022-09-04 21:04:04 +03:00
ilyaHlevnoy
796abc77ae
Update README.md 2022-09-04 21:02:23 +03:00
ilya khlevnoy
4af8eed59e update translation 2022-09-04 16:24:34 +03:00
ilya khlevnoy
e4a351091a gif must be transparent 2022-09-03 16:07:20 +03:00
ilya khlevnoy
346c3a9014 Add a button for other styles. 2022-09-03 16:05:37 +03:00
ilya khlevnoy
9f8fc02822 Add an option to ask for confirmation when closing conversation window with unread chats 2022-09-03 15:31:14 +03:00
ilya khlevnoy
c5b0709c8a SPARK-2098 SPARK-2144 Add a button to restart Spark if network error happens 2022-09-01 21:31:56 +03:00
ilyaHlevnoy
0c93184d74
Merge pull request #702 from igniterealtime/spark-2278 
SPARK-2278 Spark should remove plugins in profile if they don't exist in installation folder
 2022-08-31 22:32:06 +03:00
ilya khlevnoy
065b5232dc methods must be private 2022-08-31 22:29:01 +03:00
ilya khlevnoy
e8201c8da9 Rename Method 2022-08-31 22:17:19 +03:00