zulip/zerver/lib
Mateusz Mandera 13c3eaf086 rate_limit: Restrict tornado backend to explicitly specified domains.
This will protect us in case of some kinds of bugs that could allow
making requests such as password authentication attempts to tornado.
Without restricting the domains to which the in-memory backend can
be applied, such bugs would lead to attackers having multiple times
larger rate limits for these sensitive requests.
2020-05-25 15:40:00 -07:00
..
bugdown markdown: Disable tex and latex for math rendering. 2020-05-21 12:30:27 -07:00
url_preview url preview: Use Chrome's user agent instead of a Zulip one. 2020-04-26 10:16:43 -07:00
webhooks integrations: Add Gogs webhook for release event. 2020-05-12 17:39:38 -07:00
__init__.py
actions.py models: Create ensure_not_on_limited_plan instance method. 2020-05-19 14:48:59 -07:00
addressee.py addressee: Remove obsolete parsing functions. 2020-05-12 17:33:11 -07:00
alert_words.py python: Convert more variable type annotations to Python 3.6 style. 2020-05-08 16:42:43 -07:00
attachments.py cleanup: Delete leading newlines. 2019-08-06 23:29:11 -07:00
avatar_hash.py cleanup: Delete leading newlines. 2019-08-06 23:29:11 -07:00
avatar.py avatars: Fix gravatar URLs with EMAIL_ADDRESS_VISIBILITY_ADMINS. 2019-11-05 12:33:20 -08:00
bot_config.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
bot_lib.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
bot_storage.py python: Convert type checks to isinstance checks. 2020-04-21 17:58:09 -07:00
bulk_create.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
cache_helpers.py update_to_dict_cache: Use bulk queries when preparing msgs for cache. 2020-05-19 10:30:03 -07:00
cache.py bots: Remove owner (email) from bot-related payloads. 2020-05-12 09:48:37 -07:00
camo.py camo: Clean up type ignores. 2019-08-09 16:39:16 -07:00
ccache.py docs: Convert many http URLs to https. 2020-03-26 21:35:32 -07:00
context_managers.py zerver/lib: Use python 3 syntax for typing. 2017-11-21 20:45:52 -08:00
create_user.py models: Add recipient foreign key in UserProfile and Stream. 2019-12-09 15:14:41 -08:00
db.py db: Fix types to accept psycopg2.sql.Composable queries, avoid Any. 2020-05-04 09:33:03 -07:00
debug.py logging: Pass format arguments to logging. 2020-05-02 10:18:02 -07:00
dev_ldap_directory.py ldap: Fix development environment configuration. 2019-11-08 14:00:24 -08:00
digest.py logging: Pass format arguments to logging. 2020-05-02 10:18:02 -07:00
display_recipient.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
domains.py domains: Fix typing for validate_domain. 2019-07-29 15:18:24 -07:00
email_mirror_helpers.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
email_mirror.py logging: Pass format arguments to logging. 2020-05-02 10:18:02 -07:00
email_notifications.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
email_validation.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
emoji.py emoji_name: Raise correct exception if emoji_name is missing. 2020-04-12 11:52:45 -07:00
error_notify.py error logging: Simplify deployment data. 2020-05-06 16:29:53 -07:00
events.py api: Remove email field from realm_user and realm_bot events. 2020-05-12 17:46:13 -07:00
exceptions.py python: Convert more variable type annotations to Python 3.6 style. 2020-05-08 16:42:43 -07:00
export.py logging: Pass format arguments to logging. 2020-05-02 10:18:02 -07:00
external_accounts.py text: Fix some typos (most of them found and fixed by codespell). 2020-03-27 17:25:56 -07:00
fix_unreads.py logging: Pass format arguments to logging. 2020-05-02 10:18:02 -07:00
generate_test_data.py populate_db: Generate topics using config fixture. 2020-05-05 16:11:09 -07:00
hotspots.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
html_diff.py mypy: Remove type: ignores that are unnecessary with new mypy. 2017-11-25 10:06:28 -08:00
html_to_text.py html_to_text: Add delimiters between text from different elements. 2019-05-01 17:35:20 -07:00
i18n.py logging: Pass format arguments to logging. 2020-05-02 10:18:02 -07:00
import_realm.py import_realm: Use cursor.execute correctly. 2020-05-04 09:35:30 -07:00
initial_password.py cleanup: Delete leading newlines. 2019-08-06 23:29:11 -07:00
integrations.py integrations: Add an incoming webhook for Grafana. 2020-05-11 00:27:38 -07:00
logging_util.py logging_util: Handle record.status_code missing in skip_200_and_304. 2020-04-22 11:26:13 -07:00
management.py python: Modernize legacy Python 2 syntax with pyupgrade. 2020-04-09 16:43:22 -07:00
mdiff.py zerver core: Remove unused imports. 2019-02-02 17:41:24 -08:00
mention.py bugdown: Store if message has wildcards in MentionData. 2019-12-02 12:12:35 -08:00
message.py message: Fix malformed reaction data. 2020-05-21 14:09:53 -07:00
migrate.py migrate: Improve do_batch_update escaping correctness with psycopg2.sql. 2020-05-04 09:33:03 -07:00
mobile_auth_otp.py lint: Fix code that evaded our lint checks for string % non-tuple. 2019-04-23 15:21:37 -07:00
name_restrictions.py docs: Convert many http URLs to https. 2020-03-26 21:35:32 -07:00
narrow.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
onboarding.py onboarding: Mark strings in send_initial_realm_messages for translation. 2020-04-23 17:18:39 -07:00
outgoing_webhook.py logging: Pass format arguments to logging. 2020-05-02 10:18:02 -07:00
parallel.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
presence.py presence: Optimize performance of mobile_query. 2020-05-14 23:23:37 -07:00
profile.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
push_notifications.py logging: Pass format arguments to logging. 2020-05-02 10:18:02 -07:00
queue.py logging: Pass format arguments to logging. 2020-05-02 10:18:02 -07:00
rate_limiter.py rate_limit: Restrict tornado backend to explicitly specified domains. 2020-05-25 15:40:00 -07:00
realm_description.py html_to_text: Add delimiters between text from different elements. 2019-05-01 17:35:20 -07:00
realm_icon.py zerver core: Remove unused imports. 2019-02-02 17:41:24 -08:00
realm_logo.py realm_logo: Remove redundant realm_logo_url function. 2019-08-20 12:07:20 -07:00
redis_utils.py redis_utils: Extend put_dict_in_redis to accept token as param. 2020-05-20 13:30:44 -07:00
remote_server.py push_notifs: Handle more requests Exceptions in send_to_push_bouncer. 2019-12-04 09:58:22 -08:00
request.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
response.py exceptions: Move default json_unauthorized string to response.py. 2020-02-05 15:40:10 -08:00
rest.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
retention.py retention: Pass optional realm argument to move_messages_to_archive. 2020-05-16 14:46:56 -07:00
send_email.py logging: Pass format arguments to logging. 2020-05-02 10:18:02 -07:00
server_initialization.py server_initialization: Create Client objects for mobile/desktop. 2020-02-24 23:19:43 -08:00
sessions.py logging: Pass format arguments to logging. 2020-05-02 10:18:02 -07:00
soft_deactivation.py soft_deactivation: Fix buggy error handling. 2020-05-06 10:46:54 -07:00
sqlalchemy_utils.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
statistics.py python: Modernize legacy Python 2 syntax with pyupgrade. 2020-04-09 16:43:22 -07:00
storage.py docs: Merge front-end-build-process with html-css. 2019-10-23 13:08:36 -07:00
stream_recipient.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
stream_subscription.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
stream_topic.py python: Whitespace fixes from autopep8. 2020-04-21 17:58:09 -07:00
streams.py stream: Allow non admins to set stream post policy when creating streams. 2020-05-16 14:53:22 -07:00
subdomains.py python: Modernize legacy Python 2 syntax with pyupgrade. 2020-04-09 16:43:22 -07:00
test_classes.py populate_db: Add new admin user as 'Desdemona'. 2020-05-19 11:42:27 -07:00
test_data.source.txt
test_fixtures.py test_fixtures: Use cursor.execute correctly. 2020-05-04 09:35:30 -07:00
test_helpers.py urls: Migrate urls to use modern django pattern. 2020-05-07 16:28:58 -07:00
test_runner.py test_runner: Remove _destroy_test_db monkey patch. 2020-05-04 09:33:03 -07:00
tex.py cleanup: Delete leading newlines. 2019-08-06 23:29:11 -07:00
thumbnail.py thumbor: Fix __file__ typo. 2020-04-12 11:23:03 -07:00
timeout.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
timestamp.py zerver/lib: Use python 3 syntax for typing. 2017-11-18 16:09:04 -08:00
timezone.py markdown: Add timestamp syntax to markdown processors. 2020-05-20 14:23:55 -07:00
topic_mutes.py python: Whitespace fixes from autopep8. 2020-04-21 17:58:09 -07:00
topic.py topic: Remove 7 days restriction for editing & moving topics. 2020-05-08 12:57:50 -07:00
transfer.py logging: Pass format arguments to logging. 2020-05-02 10:18:02 -07:00
type_debug.py mypy: Add specific codes to type: ignore annotations. 2020-04-22 10:46:33 -07:00
types.py types: Consistently use DisplayRecipientT for display_recipient objects. 2019-08-20 12:15:30 -07:00
unminify.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
upload.py logging: Pass format arguments to logging. 2020-05-02 10:18:02 -07:00
url_encoding.py redirects: Refactor redirect code to use central helper function. 2020-03-25 16:39:17 -07:00
user_agent.py user_agent: Compile the regular expression. 2020-02-14 10:26:37 -08:00
user_groups.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
user_status.py python: Convert assignment type annotations to Python 3.6 style. 2020-04-22 11:02:32 -07:00
users.py popovers.js: Add version to user avatar request. 2020-05-12 11:09:01 -07:00
utils.py python: Modernize legacy Python 2 syntax with pyupgrade. 2020-04-09 16:43:22 -07:00
validator.py org settings: Enable message_retention_days in org settings UI. 2020-05-08 14:09:31 -07:00
video_calls.py zoom: Fix handling of 201 status codes from zoom API. 2019-01-16 15:37:06 -08:00
widget.py zerver core: Remove unused imports. 2019-02-02 17:41:24 -08:00
zcommand.py zcommand: Add /fluid-width and /fixed-width slash commands. 2020-04-07 20:54:34 -07:00
zephyr.py python: Remove now-unnecessary str_utils library. 2018-11-27 11:57:54 -08:00