Commit Graph

59 Commits

Author SHA1 Message Date
3fec394f3a remove redundant message 2025-06-26 22:59:00 -04:00
6d872057bd Add real notifications to copy buttons 2025-06-26 22:54:18 -04:00
19d90de79a reapplying previous code changes 2025-06-26 18:07:51 -04:00
d9be0e61b4 update SS 2025-06-26 04:57:56 -04:00
242ab1dd21 very last formatting fix for the tutorial 2025-06-26 04:49:50 -04:00
8addea0525 lol update again 2025-06-26 04:48:44 -04:00
9ce1769ad0 update 2025-06-26 04:48:02 -04:00
b051d0e570 update 2025-06-26 04:46:55 -04:00
b0e026bf64 update index 2025-06-26 04:24:45 -04:00
d096231869 Add holesail key section along with holesail tutorial and easy share tutorial so folks can share easy on discord 2025-06-26 04:13:21 -04:00
281d3432b4 remove another reduntant notif 2025-06-26 02:55:15 -04:00
f8cf7802cb remove redundant notif 2025-06-26 02:53:11 -04:00
375d1400d6 Feat: Server Props Search
Feat: Add custom prop adds
Feat: Add Removing Props
2025-06-26 02:39:42 -04:00
728ea10e80 Feat: Add toggle switches for server props editor modal
Feat: Add search for settings in modal
Update: CSS
2025-06-26 02:19:29 -04:00
591438bdb1 update sftp connection to hostname from /etc/hosts 2025-06-25 04:58:55 -04:00
949feda112 Move sftp button to sftp section as a refresh button. 2025-06-25 04:27:38 -04:00
db2d59c9b7 Update SS 2025-06-25 03:48:39 -04:00
e8f5cdd06f Add SFTP Client Connection on Load 2025-06-25 03:42:32 -04:00
f0cfcbe195 revert code from sending non needed IP info 2025-06-25 03:00:33 -04:00
e5587b7769 remove debug message 2025-06-25 02:57:53 -04:00
4c32ebae09 Convert SFTP Client to use local internal docker IPs for connection.
This removes the need for SFTP-Links to be online!
2025-06-25 02:45:37 -04:00
ac3542628b update SS 2025-06-24 01:45:37 -04:00
957592de1c remove user/pass from sftp details - no longer needed 2025-06-24 01:07:19 -04:00
170128ff68 move sftp button to controls area 2025-06-24 01:05:41 -04:00
9a16646473 fix clipboard for the panel 2025-06-24 00:05:11 -04:00
36879223db allow downloads from SFTP Client / Add new Screenshot 2025-06-23 23:07:17 -04:00
ee0707a9c1 Feat: Adding SFTP Client & Automatic Connections via button! 2025-06-23 22:54:03 -04:00
560b3f1659 Add link to source in footer 2025-06-23 19:41:27 -04:00
ff023f6cb9 remove font from controls 2025-06-23 19:31:51 -04:00
81535269bc update screenshot 2025-06-23 19:27:23 -04:00
f1964e9ef1 Add Teleport/Effects options to player list 2025-06-23 19:15:00 -04:00
53678a76ae paginate mods area and add a search mods feature 2025-06-23 18:35:09 -04:00
3c80228324 Add MC font to Auth 2025-06-23 16:16:25 -04:00
5f55f8a7e9 add mc font 2025-06-23 02:05:17 -04:00
cd51cd9244 further refine notifications 2025-06-23 01:33:41 -04:00
02219a9aa2 add a small delay when logging in to reduce confusion 2025-06-22 21:33:47 -04:00
9cc45ea48e Update notification system to remove duplicates, make notifications easier to understand. 2025-06-22 19:28:20 -04:00
35d6acee9a fix issues with /start /restart and status during restore of status 2025-06-22 18:49:03 -04:00
bea92f554e Update Readme 2025-06-19 03:58:40 -04:00
1aeb39ba0c add screenshot 2025-06-19 03:54:39 -04:00
16d8b52a01 Feat: Adding backup button for easy access to download a full server backup 2025-06-19 02:36:03 -04:00
d2498c0cf8 Feat: Updating Mods button 2025-06-19 01:39:33 -04:00
15f4564760 fix: start button producing 404s. Fix checks docker status 2025-06-17 02:22:51 -04:00
41bfb611c8 update favicon to match the website 2025-06-16 20:38:19 -04:00
d040a374a7 update readme 2025-06-16 15:42:42 -04:00
1fe2a55554 update readme 2025-06-16 15:42:12 -04:00
503b0f750b further security improvments 2025-06-16 14:38:44 -04:00
e92790383d remove logger 2025-06-16 14:25:25 -04:00
1d99fa2efc remove security log 2025-06-16 14:20:52 -04:00
697785d9fc Enhance security and fix issues in secure-auth.js
This commit significantly improves the security and reliability of the
authentication module while maintaining all original functionality. Key changes:

- Security: Added input sanitization (sanitize-html, validator), rate limiting
  (rate-limiter-flexible), CSRF protection (csurf), secure headers (helmet),
  and logging (winston). Implemented secure token generation with HMAC-SHA256.
- Bug Fixes: Fixed username validation to allow underscores. Relaxed IP and
  user-agent checks for local IPs to resolve "Invalid session" errors. Fixed
  CSP violation for inline scripts using a nonce-based approach.
- Client-Side: Added debug logging, fallback meta refresh, and improved error
  handling in the auto-login script.
- Logging: Enhanced logging for debugging (user-agent mismatches, invalid inputs).
- Config: Added STRICT_USER_AGENT_CHECK env var for production flexibility.
2025-06-16 14:19:54 -04:00