commit 60a1b33dfa3065e5a8c9d2f9df428860fb902408
Author: peterh
Date: Wed Jan 22 16:03:01 2020 -0800
Rate limit number of subscription requests
An attacker could use the /subscribe form to send tons of emails to
anyone's email address. We want to limit that so it doesn't cause
commit de457a6367b549d9c242d53e76f9ff64c5b6768f
Author: Peter Haight
Date: Mon May 11 15:36:30 2020 -0700
Added captcha to subscription form
We've been getting what we think is a lot of spam from one of the Tor exit
nodes, so we want to try a captcha on the subscription page to
commit fff600d93e52a4fe5d6f06c1d789d8590a9e1cbd
Author: Peter Haight
Date: Mon May 4 11:42:38 2020 -0700
Added a counter for subscription requests
We're getting a ton of subscription request errors from the rate limiter
and they seem to be coming from a Tor exit node. I'm curio
commit 723f2af78635f9e92c11b0defe9a7486f1739cf9
Author: peterh
Date: Wed Jan 22 15:55:24 2020 -0800
Added ip-address-middleware for rate limiting
We need to be able to get the IP address for the request. I wanted to
use a library so that we can handle the case where the app get
commit 465154fb17d483f1db7e30fa2c4ec323989237f3
Author: peterh
Date: Mon Feb 3 17:28:38 2020 -0800
Added subscription details to limiter error
We're actually getting results that indicate someone is sending lots of
requests to the /subscription-request thing. I want to print ou
commit c090f91a6caab9c6da5dda2ae908654a5bf8a59a
Author: Peter Haight
Date: Thu May 14 13:02:56 2020 -0700
Only do IP rate limiting if no other errors
We don't really care if they pound the page with incorrect captcha or other
fields, so let's only check the IP rate limit if the
commit 631e9009dfe04ad4695f5747a85b181033c1b958
Author: Peter Haight
Date: Thu Jan 23 10:02:48 2020 -0800
Fixed bug that let rate be exceeded
If you started the rate limiter for an IP address and then let it sit
for awhile, you could get the $allowance to build up over the rate
commit 1807842bcbb1bf2d9a72e79d5da07ee401363b68
Merge: b4838d3 98f3df1
Author: Georg Koppen
Date: Wed Jun 10 18:43:18 2020 +
Merge remote-tracking branch 'pc/bug34164-01'
.../{localePicker.xul => localePicker.xhtml} | 16 +++-
src/chrome/content/network-settings-shared.js |
commit 98f3df12d48daf277f2e3f056600c64294c628c1
Author: Kathy Brade
Date: Wed May 13 10:45:01 2020 -0400
Bug 34164: Tor Launcher deadlocks during startup (Firefox 77)
Initialize the DNS service as early as possible to avoid a problem
where DNS service initialization is dispatch
commit df0350fcaedf1bf859872edfead31814ef23b507
Author: Kathy Brade
Date: Wed Apr 22 15:46:23 2020 -0400
Bug 33906: Fix Tor-Launcher issues for Firefox 75
The and elements can no longer be used as root elements.
Adapt to the use of shadow DOM within the implemention.
Mig
commit 32603f686e3d006d60633a52d0cf9f6cd6cdc2ef
Author: Alex Catarineu
Date: Thu Apr 9 13:23:40 2020 +0200
Bug 32174: replace XUL with
---
src/chrome/content/network-settings-shared.js | 10 +-
src/chrome/content/network-settings.js| 4 ++--
src/chrome/content/network-se
commit de405aee1a4e5c848905b9f52bccc2764cdbb8c7
Author: Alex Catarineu
Date: Thu Apr 9 12:53:27 2020 +0200
Bug 33890: Rename xul files to xhtml
---
src/chrome/content/{localePicker.xul => localePicker.xhtml} | 0
.../{network-settings-wizard.xul => network-settings-wizard.xhtml} |
commit ee6c43379b23aca1efe581d9cb12642167e6a326
Author: Kathy Brade
Date: Wed May 13 10:30:15 2020 -0400
Bug 34206: Tor Launcher button labels are missing (Firefox 76)
Mozilla's wizard has a bug where localized labels are not loaded because
Fluent is not initialized early enoug
commit c7b35efb2a753d1a9e2cb119c780b5679bab7ca6
Author: Alex Catarineu
Date: Thu Apr 9 13:05:27 2020 +0200
Bug 33862: Fix usages of createTransport API
There was a nsISocketTransportService breaking change in
https://bugzilla.mozilla.org/show_bug.cgi?id=1558726.
---
src/compon
commit 95c2aff01a4522f5673b4048c1a29201a8a24004
Author: Georg Koppen
Date: Wed Jun 10 18:39:31 2020 +
Hardcode Tor Launcher commit for ESR 78 transition
In order to start landing ESR 78 related patches without breaking our
nightly builds (which are still ESR 68-based) we ha
commit b4838d339a84c5ebebd91a0ba6b22d44ecda97b1
Author: Georg Koppen
Date: Wed Jun 10 18:35:20 2020 +
Translations update
---
src/chrome/locale/cs/torlauncher.properties | 2 +-
src/chrome/locale/el/network-settings.dtd | 28 ++--
src/chrome/locale/el/torlaun
commit 9eb0eeb68e524b03924ea9b1f11e9b75fcdcf37b
Author: Mike Perry
Date: Mon Jun 8 18:05:34 2020 -0500
Update Trunnel for new machine_ctr field.
This field area was memset to 0 in old versions, which the code treats as
"match any machine instance", for backward compatibility wi
commit 1797d0516597c4554f19154870fd7455c9884fcf
Merge: 1e230bd48 963c3591c
Author: George Kadianakis
Date: Wed Jun 10 15:37:59 2020 +0300
Merge branch 'tor-github/pr/1925'
changes/bug30992| 4 ++
src/core/or/circuit_st.h| 6 ++
src/core/or/circu
commit 963c3591c8993ef258520db0f845392bdcd8c1e3
Author: Mike Perry
Date: Mon Jun 8 19:30:13 2020 -0500
Bug 30992: Changes file
---
changes/bug30992 | 4
1 file changed, 4 insertions(+)
diff --git a/changes/bug30992 b/changes/bug30992
new file mode 100644
index 0..f31831901
--
commit 1300e6a5124831aaa9c6e6134e154f1ededeb3db
Author: Mike Perry
Date: Mon Jun 8 19:22:46 2020 -0500
Bug 30992: Update tests
---
src/test/test_circuitpadding.c | 8
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/src/test/test_circuitpadding.c b/src/test/test_circu
commit 0a4bc8fe90c110798948d5e05d436d5e3c1fdae6
Author: Mike Perry
Date: Mon Jun 8 19:18:51 2020 -0500
Bug 30992: Track a padding machine ctr to reduce race issues.
This tracking of the instantiation count should eliminate race conditions
due
to starting and stopping machines
21 matches
Mail list logo
