Many small fixes.

Ylian Saint-Hilaire committed Jan 12, 2020 at 13:50 UTC 6607b04a9e3ae3ca7f82ad3909d00168b2d80564
9 files changed +57 -54
meshcentral.js
+1 -1
@@ -2256,7 +2256,7 @@ function mainStart() {
2256 var modules = ['ws', 'cbor', 'nedb', 'https', 'yauzl', 'xmldom', 'ipcheck', 'express', 'archiver', 'multiparty', 'node-forge', 'express-ws', 'compression', 'body-parser', 'connect-redis', 'cookie-session', 'express-handlebars'];
2257 if (require('os').platform() == 'win32') { modules.push('node-windows'); if (sspi == true) { modules.push('node-sspi'); } } // Add Windows modules
2258 if (ldap == true) { modules.push('ldapauth-fork'); }
2259 - if (config.letsencrypt != null) { if ((nodeVersion < 10) || (require('crypto').generateKeyPair == null)) { addServerWarning("Let's Encrypt support requires Node v10.12 or higher.", !args.launch); } else { modules.push('greenlock'); } } // Add Greenlock Module
2259 + if (config.letsencrypt != null) { if ((nodeVersion < 10) || (require('crypto').generateKeyPair == null)) { addServerWarning("Let's Encrypt support requires Node v10.12 or higher.", !args.launch); } else { modules.push('greenlock@3.1.5'); } } // Add Greenlock Module
2260 if (config.settings.mqtt != null) { modules.push('aedes'); } // Add MQTT Modules
2261 if (config.settings.mongodb != null) { modules.push('mongodb'); } // Add MongoDB, official driver.
2262 if (config.settings.vault != null) { modules.push('node-vault'); } // Add official HashiCorp's Vault module.
meshuser.js
+4 -2
@@ -1452,8 +1452,10 @@ module.exports.CreateMeshUser = function (parent, db, ws, req, args, domain, use
1452 if ((common.validateInt(command.quota, 0) || command.quota == null) && (command.quota != chguser.quota)) { chguser.quota = command.quota; if (chguser.quota == null) { delete chguser.quota; } change = 1; }
1453
1454 // Site admins can change any server rights, user managers can only change AccountLock, NoMeshCmd and NoNewGroups
1455 - var chgusersiteadmin = chguser.siteadmin ? chguser.siteadmin : 0;
1456 - if (((user.siteadmin == 0xFFFFFFFF) || ((user.siteadmin & 2) && (((chgusersiteadmin ^ command.siteadmin) & 0xFFFFFF1F) == 0))) && common.validateInt(command.siteadmin) && (chguser.siteadmin != command.siteadmin)) { chguser.siteadmin = command.siteadmin; change = 1; }
1455 + if (chguser._id !== user._id) { // We can't change our own siteadmin permissions.
1456 + var chgusersiteadmin = chguser.siteadmin ? chguser.siteadmin : 0;
1457 + if (((user.siteadmin == 0xFFFFFFFF) || ((user.siteadmin & 2) && (((chgusersiteadmin ^ command.siteadmin) & 0xFFFFFF1F) == 0))) && common.validateInt(command.siteadmin) && (chguser.siteadmin != command.siteadmin)) { chguser.siteadmin = command.siteadmin; change = 1; }
1458 + }
1459
1460 // Went sending a notification about a group change, we need to send to all the previous and new groups.
1461 var allTargetGroups = chguser.groups;
package.json
+1 -1
@@ -1,6 +1,6 @@
1 {
2 "name": "meshcentral",
3 - "version": "0.4.7-i",
3 + "version": "0.4.7-j",
4 "keywords": [
5 "Remote Management",
6 "Intel AMT",
translate/translate.json
+14 -13
@@ -3390,7 +3390,7 @@
3390 "de": "Das Ändern der Sprache erfordert eine Aktualisierung der Seite.",
3391 "en": "Changing the language will require a refresh of the page.",
3392 "ja": "言語を変更するには、ページを更新する必要があります。",
3393 - "nl": "Als u de taal wilt wijzigen, moet de pagina worden vernieuwd.",
3393 + "nl": "Als u de taal wilt wijzigen, moet de pagina worden ververst.",
3394 "pt": "Alterar o idioma exigirá uma atualização da página.",
3395 "ru": "Изменение языка потребует обновления страницы.",
3396 "xloc": [
@@ -3778,7 +3778,7 @@
3778 "de": "Bestätigen Sie das Kopieren von 1 Eintrag an diesen Ort?",
3779 "en": "Confirm copy of 1 entrie to this location?",
3780 "ja": "この場所への1つのエントリのコピーを確認しますか?",
3781 - "nl": "Bevestig kopie van 1 bestand naar deze locatie?",
3781 + "nl": "Bevestig kopiëren van 1 bestand naar deze locatie?",
3782 "pt": "Confirmar cópia de 1 entrada para este local?",
3783 "ru": "Подтвердить копию 1 записи в это место?",
3784 "xloc": [
@@ -3791,7 +3791,7 @@
3791 "de": "Bestätigen Sie das Kopieren von {0} Einträgen an diesen Ort?",
3792 "en": "Confirm copy of {0} entries's to this location?",
3793 "ja": "{0}エントリのコピーをこの場所に確認しますか?",
3794 - "nl": "Bevestig kopieën van {0} bestanden naar deze locatie?",
3794 + "nl": "Bevestig kopiëren van {0} bestanden naar deze locatie?",
3795 "pt": "Confirmar cópia de {0} entradas para este local?",
3796 "ru": "Подтвердить копию {0} записей в этом месте?",
3797 "xloc": [
@@ -4130,7 +4130,7 @@
4130 "de": "Kopie",
4131 "en": "Copy",
4132 "ja": "コピー",
4133 - "nl": "Kopie",
4133 + "nl": "Kopiëren",
4134 "pt": "Copiar",
4135 "ru": "Копировать",
4136 "xloc": [
@@ -4743,7 +4743,7 @@
4743 {
4744 "de": "Benutzergruppe löschen",
4745 "en": "Delete User Group",
4746 - "nl": "Verdwijder de gebruikersgroep",
4746 + "nl": "Verwijder de gebruikersgroep",
4747 "xloc": [
4748 "default.handlebars->23->1277",
4749 "default.handlebars->23->1285"
@@ -5788,7 +5788,7 @@
5788 {
5789 "de": "Dupliziere Benutzergruppe",
5790 "en": "Duplicate User Group",
5791 - "nl": "Duplicer Gebruikers Groep",
5791 + "nl": "Dupliceer Gebruikers Groep",
5792 "xloc": [
5793 "default.handlebars->23->1253"
5794 ]
@@ -13127,7 +13127,8 @@
13127 ]
13128 },
13129 {
13130 - "en": "Relay teller"
13130 + "en": "Relay teller",
13131 + "nl": "Relay teller"
13132 },
13133 {
13134 "cs": "Zapamatovat toto zařízení na 30 dní.",
@@ -13541,7 +13542,7 @@
13542 "en": "Reset devices",
13543 "fr": "Réinitialiser les appareils",
13544 "ja": "デバイスをリセットする",
13544 - "nl": "Reset apparaten",
13545 + "nl": "Herstart apparaten",
13546 "pt": "Redefinir dispositivos",
13547 "ru": "Сбросить устройства",
13548 "xloc": [
@@ -16011,7 +16012,7 @@
16012 "de": "Diese Seite existiert nicht.",
16013 "en": "This page does not exist",
16014 "ja": "このページは存在しません",
16014 - "nl": "",
16015 + "nl": "Deze pagina bestaat niet",
16016 "pt": "Esta página não existe",
16017 "ru": "Страница не существует",
16018 "xloc": [
@@ -16191,7 +16192,7 @@
16192 "de": "Um dieses Konto zu löschen, geben Sie das Konto-Passwort in beide untenstehenden Eingabefelder ein und wählen Sie OK.",
16193 "en": "To delete this account, type in the account password in both boxes below and hit ok.",
16194 "ja": "このアカウントを削除するには、下の両方のボックスにアカウントのパスワードを入力して[OK]をクリックします。",
16194 - "nl": "Om dit account te verwijderen, typt u het accountwachtwoord in beide onderstaande vakken en drukt u op OK.",
16195 + "nl": "Om dit account te verwijderen, typt u het accountwachtwoord in beide onderstaande vakken en klikt u op OK.",
16196 "pt": "Para excluir esta conta, digite a senha da conta nas duas caixas abaixo e pressione ok.",
16197 "ru": "Чтобы удалить эту учетную запись, введите пароль учетной записи в оба поля и нажмите ОК.",
16198 "xloc": [
@@ -16215,7 +16216,7 @@
16216 "de": "Zum Installieren, kopieren Sie den folgenden Befehl und führen Sie ihn in einem Root-Terminal aus.",
16217 "en": "To install, cut and paste the following command in a root terminal.",
16218 "ja": "インストールするには、ルートターミナルで次のコマンドをカットアンドペーストします。",
16218 - "nl": "Om de volgende opdracht te installeren, knippen en plakken in een root-terminal.",
16219 + "nl": "Om te installeren, knip en plak de volgende opdracht in de root-terminal.",
16220 "pt": "Para instalar, recorte e cole o seguinte comando em um terminal raiz.",
16221 "ru": "Для установки, вырежьте и вставьте следующую команду в root терминал.",
16222 "xloc": [
@@ -16239,7 +16240,7 @@
16240 "de": "Um einen Mesh-Agenten zu entfernen, führen Sie den folgenden Befehl aus. Root-Zugriff wird benötigt.",
16241 "en": "To remove a mesh agent, run the following command. Root credentials will be needed.",
16242 "ja": "メッシュエージェントを削除するには、次のコマンドを実行します。ルート資格情報が必要になります。",
16242 - "nl": "Voer de volgende opdracht uit om een mesh-agent te verwijderen. Root gegevens zijn nodig.",
16243 + "nl": "Voer de volgende opdracht uit om een mesh-agent te verwijderen. Root rechten zijn nodig.",
16244 "pt": "Para remover um agente de malha, execute o seguinte comando. Serão necessárias credenciais raiz.",
16245 "ru": "Для удаления mesh агента, выполните следующую команду. Root учетные данные будут необходимы.",
16246 "xloc": [
@@ -18333,7 +18334,7 @@
18334 "de": "kopieren",
18335 "en": "copy",
18336 "ja": "コピー",
18336 - "nl": "kopieren",
18337 + "nl": "kopiëren",
18338 "pt": "Copiar",
18339 "ru": "копировать",
18340 "xloc": [
views/default-mobile.handlebars
+1 -1
@@ -822,7 +822,7 @@
822 var secret = message.secret;
823 if (secret.length == 52) { secret = secret.split(/(.............)/).filter(Boolean).join(' '); }
824 else if (secret.length == 32) { secret = secret.split(/(....)/).filter(Boolean).join(' '); secret = secret.substring(0, 20) + '<br/>' + secret.substring(20) }
825 - QH('d2optinfo', format("Install <a href=\"https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2\" rel=\"noreferrer noopener\" target=_blank>Google Authenticator</a> or a compatible application, use <a href=\"{0}\" rel=\"noreferrer noopener\" target=_blank> this link</a> or enter the secret below. Then, enter the current 6 digit token to activate 2-Step login.", message.url) + '<br /><br /><div style=width:100%;text-align:center><tt id=d2optsecret secret=\"' + message.secret + '\" style=font-size:15px>' + secret + '</tt><br /><br />Token: <input type=text onkeypress=\"return (event.keyCode == 8) || (event.charCode >= 48 && event.charCode <= 57)\" onkeyup=account_addOtpCheck(event) onkeydown=account_addOtpCheck() maxlength=6 id=d2otpauthinput type=text></div>');
825 + QH('d2optinfo', format("Install <a href=\"https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2\" rel=\"noreferrer noopener\" target=_blank>Google Authenticator</a> or a compatible application, use <a href=\"{0}\" rel=\"noreferrer noopener\" target=_blank> this link</a> or enter the secret below. Then, enter the current 6 digit token to activate 2-Step login.", message.url) + '<br /><br /><div style=width:100%;text-align:center><tt id=d2optsecret secret=\"' + message.secret + '\" style=font-size:15px>' + secret + '</tt><br /><br />Token: <input type=text autocomplete="one-time-code" inputmode="numeric" pattern="[0-9]*" onkeypress=\"return (event.keyCode == 8) || (event.charCode >= 48 && event.charCode <= 57)\" onkeyup=account_addOtpCheck(event) onkeydown=account_addOtpCheck() maxlength=6 id=d2otpauthinput type=text></div>');
826 QV('idx_dlgOkButton', true);
827 QE('idx_dlgOkButton', false);
828 Q('d2otpauthinput').focus();
views/default.handlebars
+18 -16
@@ -2032,7 +2032,7 @@
2032 var secret = message.secret;
2033 if (secret.length == 52) { secret = secret.split(/(.............)/).filter(Boolean).join(' '); }
2034 else if (secret.length == 32) { secret = secret.split(/(....)/).filter(Boolean).join(' '); secret = secret.substring(0, 20) + '<br/>' + secret.substring(20) }
2035 - QH('d2optinfo', '<table style=width:380px><tr><td style=vertical-align:top>' + format("Install <a href=\"https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2\" rel=\"noreferrer noopener\" target=_blank>Google Authenticator</a> or a compatible application and scan the barcode, use <a href=\"{0}\" rel=\"noreferrer noopener\" target=_blank>this link</a> or enter the secret. Then, enter the current 6 digit token below to activate 2-Step login.", message.url) + '<br /><br />Secret<br /><tt id=d2optsecret secret=\"' + message.secret + '\" style=font-size:12px>' + secret + '</tt><br /><br /></td><td style=width:1px;vertical-align:top><a href=\"' + message.url + '\" rel=\"noreferrer noopener\" target=_blank><div id="qrcode"></div></a></td><tr><td colspan=2 style="text-align:center;border-top:1px solid black"><br />' + "Enter the token here for 2-step login:" + ' <input type=text onkeypress=\"return (event.keyCode == 8) || (event.charCode >= 48 && event.charCode <= 57)\" onkeyup=account_addOtpCheck(event) onkeydown=account_addOtpCheck() maxlength=6 id=d2otpauthinput type=text></td></table>');
2035 + QH('d2optinfo', '<table style=width:380px><tr><td style=vertical-align:top>' + format("Install <a href=\"https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2\" rel=\"noreferrer noopener\" target=_blank>Google Authenticator</a> or a compatible application and scan the barcode, use <a href=\"{0}\" rel=\"noreferrer noopener\" target=_blank>this link</a> or enter the secret. Then, enter the current 6 digit token below to activate 2-Step login.", message.url) + '<br /><br />Secret<br /><tt id=d2optsecret secret=\"' + message.secret + '\" style=font-size:12px>' + secret + '</tt><br /><br /></td><td style=width:1px;vertical-align:top><a href=\"' + message.url + '\" rel=\"noreferrer noopener\" target=_blank><div id="qrcode"></div></a></td><tr><td colspan=2 style="text-align:center;border-top:1px solid black"><br />' + "Enter the token here for 2-step login:" + ' <input type=text autocomplete="one-time-code" inputmode="numeric" pattern="[0-9]*" onkeypress=\"return (event.keyCode == 8) || (event.charCode >= 48 && event.charCode <= 57)\" onkeyup=account_addOtpCheck(event) onkeydown=account_addOtpCheck() maxlength=6 id=d2otpauthinput type=text></td></table>');
2036 new QRCode(Q('qrcode'), { text: message.url, width: 128, height: 128, colorDark: '#000000', colorLight: '#EEE', correctLevel: QRCode.CorrectLevel.H });
2037 QV('idx_dlgOkButton', true);
2038 QE('idx_dlgOkButton', false);
@@ -9036,6 +9036,9 @@
9036 if (xxdialogMode) return;
9037 haltEvent(e);
9038 userid = decodeURIComponent(userid);
9039 + var user = users[userid.toLowerCase()];
9040 + if (user == null) return;
9041 + var uself = (userinfo._id == user._id);
9042 var x = '<div><div id=d2AdminPermissions>';
9043 x += '<label><input type=checkbox onchange=showUserAdminDialogValidate() id=ua_fileaccess>' + "Server Files" + '</label>, <input type=number onchange=showUserAdminDialogValidate() maxlength=10 id=ua_fileaccessquota>k max, blank for default<br><hr/>';
9044 x += '<label><input type=checkbox onchange=showUserAdminDialogValidate() id=ua_fulladmin>' + "Full Administrator" + '</label><br>';
@@ -9048,8 +9051,7 @@
9051 x += '<label><input type=checkbox onchange=showUserAdminDialogValidate() id=ua_nonewgroups>' + "No New Device Groups" + '</label><br>';
9052 x += '<label><input type=checkbox onchange=showUserAdminDialogValidate() id=ua_nomeshcmd>' + "No Tools (MeshCmd/Router)" + '</label><br>';
9053 x += '</div>';
9051 - var user = users[userid.toLowerCase()];
9052 - setDialogMode(2, "Server Permissions", 3, showUserAdminDialogEx, x, user);
9054 + setDialogMode(2, "Server Permissions", 2 + (uself?0:1), showUserAdminDialogEx, x, user);
9055 if (user.siteadmin && user.siteadmin != 0) {
9056 Q('ua_fulladmin').checked = (user.siteadmin == 0xFFFFFFFF);
9057 Q('ua_serverbackup').checked = ((user.siteadmin != 0xFFFFFFFF) && ((user.siteadmin & 1) != 0)); // Server Backup
@@ -9062,18 +9064,18 @@
9064 Q('ua_nomeshcmd').checked = ((user.siteadmin != 0xFFFFFFFF) && ((user.siteadmin & 128) != 0)); // No Tools (MeshCMD / Router)
9065 Q('ua_manageusergroups').checked = ((user.siteadmin != 0xFFFFFFFF) && ((user.siteadmin & 256) != 0)); // Manage User Groups
9066 }
9065 - QE('ua_fulladmin', userinfo.siteadmin == 0xFFFFFFFF);
9066 - QE('ua_serverbackup', userinfo.siteadmin == 0xFFFFFFFF);
9067 - QE('ua_manageusers', userinfo.siteadmin == 0xFFFFFFFF);
9068 - QE('ua_manageusergroups', userinfo.siteadmin == 0xFFFFFFFF);
9069 - QE('ua_serverrestore', userinfo.siteadmin == 0xFFFFFFFF);
9070 - QE('ua_fileaccess', userinfo.siteadmin == 0xFFFFFFFF);
9071 - QE('ua_fileaccessquota', userinfo.siteadmin == 0xFFFFFFFF);
9072 - QE('ua_serverupdate', userinfo.siteadmin == 0xFFFFFFFF);
9067 + QE('ua_fulladmin', !uself && (userinfo.siteadmin == 0xFFFFFFFF));
9068 + QE('ua_serverbackup', !uself && (userinfo.siteadmin == 0xFFFFFFFF));
9069 + QE('ua_manageusers', !uself && (userinfo.siteadmin == 0xFFFFFFFF));
9070 + QE('ua_manageusergroups', !uself && (userinfo.siteadmin == 0xFFFFFFFF));
9071 + QE('ua_serverrestore', !uself && (userinfo.siteadmin == 0xFFFFFFFF));
9072 + QE('ua_fileaccess', !uself && (userinfo.siteadmin == 0xFFFFFFFF));
9073 + QE('ua_fileaccessquota', !uself && (userinfo.siteadmin == 0xFFFFFFFF));
9074 + QE('ua_serverupdate', !uself && (userinfo.siteadmin == 0xFFFFFFFF));
9075 QV('d2AdminPermissions', userinfo.siteadmin == 0xFFFFFFFF)
9074 - QE('ua_lockedaccount', (userinfo.siteadmin & 2) && (user.siteadmin != 0xFFFFFFFF) && (userinfo._id != user._id));
9075 - QE('ua_nonewgroups', (userinfo.siteadmin & 2) && (user.siteadmin != 0xFFFFFFFF) && (userinfo._id != user._id));
9076 - QE('ua_nomeshcmd', (userinfo.siteadmin & 2) && (user.siteadmin != 0xFFFFFFFF) && (userinfo._id != user._id));
9076 + QE('ua_lockedaccount', !uself && (userinfo.siteadmin & 2) && (user.siteadmin != 0xFFFFFFFF) && (userinfo._id != user._id));
9077 + QE('ua_nonewgroups', !uself && (userinfo.siteadmin & 2) && (user.siteadmin != 0xFFFFFFFF) && (userinfo._id != user._id));
9078 + QE('ua_nomeshcmd', !uself && (userinfo.siteadmin & 2) && (user.siteadmin != 0xFFFFFFFF) && (userinfo._id != user._id));
9079 Q('ua_fileaccessquota').value = (user.quota != null)?(user.quota / 1024):'';
9080 showUserAdminDialogValidate();
9081 return false;
@@ -9961,12 +9963,12 @@
9963 window.serverStatCpu = new Chart(document.getElementById('serverCpuChart').getContext('2d'), {
9964 type: 'doughnut',
9965 data: { datasets: [{ data: [0, 0], backgroundColor: ['#AAAAAA', '#00AA00'] }], labels: ["Used", "Free"] },
9964 - options: { responsive: true, legend: { position: 'none', }, animation: { animateScale: true, animateRotate: true }, width: '60px' }
9966 + options: { events: [], responsive: true, legend: { position: 'none', }, animation: { animateScale: true, animateRotate: true }, width: '60px' }
9967 });
9968 window.serverStatMemory = new Chart(document.getElementById('serverMemoryChart').getContext('2d'), {
9969 type: 'doughnut',
9970 data: { datasets: [{ data: [0, 0], backgroundColor: ['#AAAAAA', '#00AA00'] }], labels: ["Used", "Free"] },
9969 - options: { responsive: true, legend: { position: 'none', }, animation: { animateScale: true, animateRotate: true }, width: '60px' }
9971 + options: { events: [], responsive: true, legend: { position: 'none', }, animation: { animateScale: true, animateRotate: true }, width: '60px' }
9972 });
9973 }
9974
views/login-mobile.handlebars
+8 -10
@@ -53,11 +53,11 @@
53 <table>
54 <tr>
55 <td id=loginusername align=right width=100>Username:</td>
56 - <td><input id=username type=text maxlength=64 name=username onchange=validateLogin(1) onkeyup=validateLogin(1,event) /></td>
56 + <td><input id=username type=text autocomplete="username" maxlength=64 name=username onchange=validateLogin(1) onkeyup=validateLogin(1,event) /></td>
57 </tr>
58 <tr>
59 <td align=right>Password:</td>
60 - <td><input id=password type=password maxlength=256 name=password autocomplete=off onchange=validateLogin(2) onkeyup=validateLogin(2,event) /></td>
60 + <td><input id=password type=password autocomplete="current-password" maxlength=256 name=password autocomplete=off onchange=validateLogin(2) onkeyup=validateLogin(2,event) /></td>
61 </tr>
62 <tr>
63 <td><div id=showPassHintLink style=display:none><a onclick=showPassHint() style="cursor:pointer">Show Hint</a></div></td>
@@ -86,19 +86,19 @@
86 <table>
87 <tr id="nuUserRow">
88 <td align=right width=100>Username:</td>
89 - <td><input id=ausername type=text name=username onchange=validateCreate(1) maxlength=64 onkeydown=haltReturn(event) onkeyup=validateCreate(1,event) /></td>
89 + <td><input id=ausername type=text autocomplete="username" name=username onchange=validateCreate(1) maxlength=64 onkeydown=haltReturn(event) onkeyup=validateCreate(1,event) /></td>
90 </tr>
91 <tr>
92 <td align=right width=100>Email:</td>
93 - <td><input id=aemail type=text name=email onchange=validateCreate(2) maxlength=256 onkeydown=haltReturn(event) onkeyup=validateCreate(2,event) /></td>
93 + <td><input id=aemail type=text autocomplete="email" inputmode="email" name=email onchange=validateCreate(2) maxlength=256 onkeydown=haltReturn(event) onkeyup=validateCreate(2,event) /></td>
94 </tr>
95 <tr>
96 <td align=right>Password:</td>
97 - <td><input id=apassword1 type=password name=password1 autocomplete=off maxlength=256 onkeydown=haltReturn(event) onchange=validateCreate(3) onkeyup=validateCreate(3,event) /></td>
97 + <td><input id=apassword1 type=password autocomplete="current-password" name=password1 maxlength=256 onkeydown=haltReturn(event) onchange=validateCreate(3) onkeyup=validateCreate(3,event) /></td>
98 </tr>
99 <tr>
100 <td align=right>Password:</td>
101 - <td><input id=apassword2 type=password name=password2 autocomplete=off maxlength=256 onkeydown=haltReturn(event) onchange=validateCreate(4) onkeyup=validateCreate(4,event) /></td>
101 + <td><input id=apassword2 type=password autocomplete="current-password" name=password2 maxlength=256 onkeydown=haltReturn(event) onchange=validateCreate(4) onkeyup=validateCreate(4,event) /></td>
102 </tr>
103 <tr id="createPanelHint" style="display:none">
104 <td align=right>Pass Hint:</td>
@@ -130,7 +130,7 @@
130 <table>
131 <tr>
132 <td align=right width=100>Email:</td>
133 - <td><input id=remail type=text name=email maxlength=256 onchange=validateReset() onkeyup=validateReset(event) /></td>
133 + <td><input id=remail type=text inputmode="email" autocomplete="email" name=email maxlength=256 onchange=validateReset() onkeyup=validateReset(event) /></td>
134 </tr>
135 <tr>
136 <td colspan=2>
@@ -152,7 +152,7 @@
152 <tr>
153 <td align=right width=100>Login token:</td>
154 <td>
155 - <input id=tokenInput type=text name=token maxlength=50 onchange=checkToken(event) onkeyup=checkToken(event) onkeydown=checkToken(event) onfocus=checkTokenTimer(1) onblur=checkTokenTimer(0) />
155 + <input id=tokenInput type=text autocomplete="one-time-code" inputmode="numeric" pattern="[0-9]*" name=token maxlength=50 onchange=checkToken(event) onkeyup=checkToken(event) onkeydown=checkToken(event) onfocus=checkTokenTimer(1) onblur=checkTokenTimer(0) />
156 <input id=hwtokenInput type=text name=hwtoken style="display:none" />
157 </td>
158 </tr>
@@ -172,7 +172,6 @@
172 <input id=tokenformargs name="urlargs" type="hidden" value="" />
173 </form>
174 </div>
175 -
175 <div id=resettokenpanel style="background-color:#979797;border-radius:16px;width:260px;padding:16px;text-align:center;display:none;clear:both">
176 <form method=post autocomplete=off>
177 <input type=hidden name=action value=resetaccount />
@@ -195,7 +194,6 @@
194 <input id=resettokenformargs name="urlargs" type="hidden" value="" />
195 </form>
196 </div>
198 -
197 <div id=resetpasswordpanel style="position:relative;background-color:#979797;border-radius:16px;width:300px;padding:16px;text-align:center;display:none">
198 <form method=post>
199 <input type=hidden name=action value=resetpassword />
views/login.handlebars
+8 -8
@@ -51,11 +51,11 @@
51 <table>
52 <tr>
53 <td id=loginusername align=right width=100>Username:</td>
54 - <td><input id=username type=text maxlength=64 name=username onchange=validateLogin(1) onkeyup=validateLogin(1,event) /></td>
54 + <td><input id=username autocomplete="username" type=text maxlength=64 name=username onchange=validateLogin(1) onkeyup=validateLogin(1,event) /></td>
55 </tr>
56 <tr>
57 <td align=right>Password:</td>
58 - <td><input id=password type=password maxlength=256 name=password autocomplete=off onchange=validateLogin(2) onkeyup=validateLogin(2,event) /></td>
58 + <td><input id=password autocomplete="current-password" type=password maxlength=256 name=password onchange=validateLogin(2) onkeyup=validateLogin(2,event) /></td>
59 </tr>
60 <tr>
61 <td><div id=showPassHintLink style=display:none><a onclick="return showPassHint(event);" href="#" style="cursor:pointer">Show Hint</a></div></td>
@@ -83,19 +83,19 @@
83 <table>
84 <tr id="nuUserRow">
85 <td id="nuUser" align=right width=100>Username:</td>
86 - <td><input id=ausername type=text name=username onchange=validateCreate(1) maxlength=64 onkeydown=haltReturn(event) onkeyup=validateCreate(1,event) /></td>
86 + <td><input id=ausername type=text autocomplete="username" name=username onchange=validateCreate(1) maxlength=64 onkeydown=haltReturn(event) onkeyup=validateCreate(1,event) /></td>
87 </tr>
88 <tr>
89 <td id="nuEmail" align=right width=100>Email:</td>
90 - <td><input id=aemail type=text name=email onchange=validateCreate(2) maxlength=256 onkeydown=haltReturn(event) onkeyup=validateCreate(2,event) /></td>
90 + <td><input id=aemail type=text autocomplete="email" inputmode="email" name=email onchange=validateCreate(2) maxlength=256 onkeydown=haltReturn(event) onkeyup=validateCreate(2,event) /></td>
91 </tr>
92 <tr>
93 <td id="nuPass1" align=right>Password:</td>
94 - <td><input id=apassword1 type=password name=password1 autocomplete=off maxlength=256 onkeydown=haltReturn(event) onchange=validateCreate(3,event) onkeyup=validateCreate(3,event) /></td>
94 + <td><input id=apassword1 type=password name=password1 autocomplete="new-password" maxlength=256 onkeydown=haltReturn(event) onchange=validateCreate(3,event) onkeyup=validateCreate(3,event) /></td>
95 </tr>
96 <tr>
97 <td id="nuPass2" align=right>Password:</td>
98 - <td><input id=apassword2 type=password name=password2 autocomplete=off maxlength=256 onkeydown=haltReturn(event) onchange=validateCreate(4,event) onkeyup=validateCreate(4,event) /></td>
98 + <td><input id=apassword2 type=password name=password2 autocomplete="new-password" maxlength=256 onkeydown=haltReturn(event) onchange=validateCreate(4,event) onkeyup=validateCreate(4,event) /></td>
99 </tr>
100 <tr id="createPanelHint" style="display:none">
101 <td id="nuHint" align=right>Password Hint:</td>
@@ -126,7 +126,7 @@
126 <table>
127 <tr>
128 <td align=right width=100>Email:</td>
129 - <td><input id=remail type=text name=email maxlength=256 onchange=validateReset() onkeyup=validateReset(event) /></td>
129 + <td><input id=remail type=text inputmode="email" name=email maxlength=256 onchange=validateReset() onkeyup=validateReset(event) /></td>
130 </tr>
131 <tr>
132 <td colspan=2>
@@ -148,7 +148,7 @@
148 <tr>
149 <td align=right width=100>Login token:</td>
150 <td>
151 - <input id=tokenInput type=text name=token maxlength=50 onchange=checkToken(event) onpaste=resetCheckToken(event) onkeyup=checkToken(event) onkeydown=checkToken(event) /><br />
151 + <input id=tokenInput autocomplete="one-time-code" inputmode="numeric" pattern="[0-9]*" type=text name=token maxlength=50 onchange=checkToken(event) onpaste=resetCheckToken(event) onkeyup=checkToken(event) onkeydown=checkToken(event) /><br />
152 <input id=hwtokenInput type=text name=hwtoken style="display:none" />
153 </td>
154 </tr>
webserver.js
+2 -2
@@ -1546,7 +1546,7 @@ module.exports.CreateWebServer = function (parent, db, args, certificates) {
1546 if ((obj.parent.mailserver != null) && (obj.parent.certificates.CommonName != null) && (obj.parent.certificates.CommonName.indexOf('.') != -1) && (obj.args.lanonly != true)) { features += 0x00000040; } // Email invites
1547 if (obj.args.webrtc == true) { features += 0x00000080; } // Enable WebRTC (Default false for now)
1548 if (obj.args.clickonce !== false) { features += 0x00000100; } // Enable ClickOnce (Default true)
1549 - if (obj.args.allowhighqualitydesktop == true) { features += 0x00000200; } // Enable AllowHighQualityDesktop (Default false)
1549 + if (obj.args.allowhighqualitydesktop !== false) { features += 0x00000200; } // Enable AllowHighQualityDesktop (Default true)
1550 if (obj.args.lanonly == true || obj.args.mpsport == 0) { features += 0x00000400; } // No CIRA
1551 if ((obj.parent.serverSelfWriteAllowed == true) && (user != null) && (user.siteadmin == 0xFFFFFFFF)) { features += 0x00000800; } // Server can self-write (Allows self-update)
1552 if ((parent.config.settings.no2factorauth !== true) && (domain.auth != 'sspi') && (obj.parent.certificates.CommonName.indexOf('.') != -1) && (obj.args.nousers !== true)) { features += 0x00001000; } // 2-step login supported
@@ -3410,7 +3410,7 @@ module.exports.CreateWebServer = function (parent, db, args, certificates) {
3410 'Referrer-Policy': 'no-referrer',
3411 'X-XSS-Protection': '1; mode=block',
3412 'X-Content-Type-Options': 'nosniff',
3413 - 'Content-Security-Policy': "default-src 'none'; script-src 'self' 'unsafe-inline'; connect-src 'self'" + geourl + selfurl + "; img-src 'self'" + geourl + " data:; style-src 'self' 'unsafe-inline'; frame-src 'self'; media-src 'self'; base-url: 'none'; form-action 'self'"
3413 + 'Content-Security-Policy': "default-src 'none'; script-src 'self' 'unsafe-inline'; connect-src 'self'" + geourl + selfurl + "; img-src 'self'" + geourl + " data:; style-src 'self' 'unsafe-inline'; frame-src 'self'; media-src 'self'; form-action 'self'"
3414 };
3415 if ((parent.config.settings.allowframing !== true) && (typeof parent.config.settings.allowframing !== 'string')) { headers['X-Frame-Options'] = 'sameorigin'; }
3416 res.set(headers);