8 Commits

Include renames

Author	SHA1	Message	Date
nathan	3a3ba861dc	Phase 5a: persistent websocket with request ids and reconnect ... Client (ts/network_ts.ts): one WebSocket per page. Commands queue and go out one at a time with a client-chosen id; the response is matched on the echoed id (or to the in-flight request for older servers). 12 s timeout per request, exponential-backoff reconnect (0.5 s to 10 s), the in-flight request is retried after a reconnect, and log polls are de-duplicated so they cannot pile up behind a stalled connection. The old global flag that silently dropped any request made while another was in flight is gone. Server (src/webserver.go): the /data/ handler now serves any number of commands on one connection (it used to break out of its loop after the first reply without closing the socket, leaving it open and deaf; the old client papered over that by opening a new socket per request). Connection closed on exit, request id echoed in the response. Test: TestWSServesMultipleCommandsPerConnection.	2026-09-26 13:19:38 +10:00
nathan	4976219857	Phase 1a: browser-side security ... - Provider-controlled strings (channel names, groups, file names, log lines, in-place mapping edits, client info) are rendered with textContent instead of innerHTML. PopupContent.description() takes an explicit isHTML flag that only the static help texts pass. - Websocket: drop the always-true CheckOrigin so gorilla's same-origin check applies; read the session token from the HttpOnly cookie sent with the handshake (the ?Token= query parameter is still accepted for older clients); the client no longer puts the token in the URL, rewrites the cookie, or console-logs request/response payloads. - Session cookie is HttpOnly, SameSite=Strict, Path=/, session-scoped (expiry stays server side) and is cleared on logout. - Serving the first-run wizard no longer sets Settings.AuthenticationWEB to false; the wizard page simply bypasses login while it is active. - Upgrade failures no longer write a second error response. - Tests: src/websocket_test.go covers cross-origin refusal, same-origin and no-Origin clients, missing/unknown/legacy tokens, and cookie flags.	2026-09-26 12:59:47 +10:00
nathan	e48a061ca0	Enhance WebSocket handling and log polling logic	2026-02-11 16:25:48 +11:00
nathan	ffd43d5217	Enhance log display behavior and menu state management	2026-02-11 14:37:02 +11:00
nathan	9bd2b32003	Enhance WebSocket connection handling with improved timeout and error states	2026-02-11 14:20:24 +11:00
nathan	8cb9e43a72	Redesign UI and add first-party Docker runtime support	2026-02-11 11:04:39 +11:00
marmei	67fe80b4fd	v2.0.0.0008-beta ... Pull request: Error in http/https detection. (#6)	2019-08-09 09:31:31 +02:00
marmei	e001b06b62	v2.0.0.0000	2019-08-02 20:12:09 +02:00