| #615 |
Can JavaScript loaded from Tahoe access all your content which is loaded from Tahoe?
|
code-frontend-web
|
assigned
|
davidsarah
|
defect
|
critical
|
| #891 |
web gateway memory grows without bound under load
|
code-frontend-web
|
new
|
warner
|
defect
|
critical
|
| #127 |
Cap URLs leaked via HTTP Referer header
|
code-frontend-web
|
assigned
|
davidsarah
|
defect
|
major
|
| #203 |
add deep-copy function to web API
|
code-frontend-web
|
new
|
|
enhancement
|
major
|
| #277 |
make the wui show the underlying LAFS model -- one WUI page per link in LAFS
|
code-frontend-web
|
new
|
zooko
|
enhancement
|
major
|
| #318 |
wapi: test that we return 200 or 201 as appropriate
|
code-frontend-web
|
new
|
|
defect
|
major
|
| #324 |
use POST for operations whose noun doesn't denote the same resource that a GET would denote, or that have side effects
|
code-frontend-web
|
new
|
|
defect
|
major
|
| #366 |
address Nathan Wilcox's concerns about "Tahoe and the browser security model"
|
code-frontend-web
|
new
|
nejucomo
|
defect
|
major
|
| #413 |
mutable files: expose version info to HTTP clients
|
code-frontend-web
|
new
|
|
enhancement
|
major
|
| #462 |
PUT should elicit 100 Continue
|
code-frontend-web
|
new
|
|
defect
|
major
|
| #471 |
servermap update chart doesn't fit
|
code-frontend-web
|
new
|
|
defect
|
major
|
| #529 |
Implement Halt and Catch Fire
|
code-frontend-web
|
new
|
|
defect
|
major
|
| #554 |
some directory targets in wapi/wui require trailing slashes
|
code-frontend-web
|
assigned
|
davidsarah
|
defect
|
major
|
| #567 |
add version info to t=JSON output data
|
code-frontend-web
|
assigned
|
rvs
|
enhancement
|
major
|
| #568 |
make immutable check/verify/repair and mutable check/verify work given only a verify cap
|
code-frontend-web
|
new
|
daira
|
defect
|
major
|
| #587 |
Web nodes provide ambient upload authority
|
code-frontend-web
|
new
|
daira
|
defect
|
major
|
| #589 |
JSON link does not work if there is a '#' character in the file name.
|
code-frontend-web
|
new
|
|
defect
|
major
|
| #622 |
add a 'repair' button on the webapi checker results page
|
code-frontend-web
|
assigned
|
Lcstyle
|
enhancement
|
major
|
| #631 |
trailing spaces in filenames break the WUI rename function
|
code-frontend-web
|
new
|
|
defect
|
major
|
| #674 |
controlled access to your WUI
|
code-frontend-web
|
new
|
nobody
|
enhancement
|
major
|
| #679 |
/storage emitting exception - lease reporting code
|
code-frontend-web
|
assigned
|
davidsarah
|
defect
|
major
|
| #686 |
Search for lost share resulted in a directory popping up at unexpected place
|
code-frontend-web
|
assigned
|
daira
|
defect
|
major
|
| #766 |
repair results Summary field says "Unhealthy" even though it is healthy after the repair, if it was unhealthy before
|
code-frontend-web
|
assigned
|
davidsarah
|
defect
|
major
|
| #770 |
webapi: listen on multiple interfaces/ports
|
code-frontend-web
|
new
|
|
enhancement
|
major
|
| #784 |
explain what the "Report an incident" button does
|
code-frontend-web
|
new
|
|
enhancement
|
major
|
| #821 |
A script in a file viewed through the WUI can obtain the file's read cap
|
code-frontend-web
|
assigned
|
davidsarah
|
defect
|
major
|
| #822 |
Web API should use a more reliable, out-of-band means of reporting errors (such as a server connection being lost) during a download
|
code-frontend-web
|
new
|
|
defect
|
major
|
| #823 |
WUI server should have a disallow-all robots.txt
|
code-frontend-web
|
new
|
|
defect
|
major
|
| #825 |
Cannot use WUI to upload a file with a name different to its name in the local filesystem
|
code-frontend-web
|
new
|
|
enhancement
|
major
|
| #826 |
Rename action in WUI has no confirmation for clobbering another entry
|
code-frontend-web
|
new
|
|
defect
|
major
|
| #827 |
Put file download links ('?save=true') in WUI directory listings
|
code-frontend-web
|
assigned
|
davidsarah
|
defect
|
major
|
| #857 |
Make operation-handle-querying use only a little memory
|
code-frontend-web
|
new
|
nobody
|
defect
|
major
|
| #884 |
give nice error page when URL is mangled or from the future
|
code-frontend-web
|
assigned
|
davidsarah
|
defect
|
major
|
| #885 |
Ignore space or %20 in webapi URLs
|
code-frontend-web
|
assigned
|
davidsarah
|
defect
|
major
|
| #906 |
ETag support for mutable files and directories
|
code-frontend-web
|
new
|
|
defect
|
major
|
| #922 |
The URL of the info page for an unknown dirnode should not grant authority to the containing directory
|
code-frontend-web
|
assigned
|
davidsarah
|
defect
|
major
|
| #951 |
uploads aren't cancelled by closing the web page
|
code-frontend-web
|
assigned
|
zooko
|
defect
|
major
|
| #971 |
"Humanized failures" should still have a traceback, hidden by default
|
code-frontend-web
|
assigned
|
davidsarah
|
enhancement
|
major
|
| #975 |
results of deep-size should include mutable files
|
code-frontend-web
|
new
|
|
defect
|
major
|
| #979 |
AssertionError on DELETE when child links point to yourself
|
code-frontend-web
|
new
|
|
defect
|
major
|
| #995 |
It's way too easy to give away write directory caps
|
code-frontend-web
|
new
|
nobody
|
defect
|
major
|
| #997 |
The webapi/WUI should have https enabled by default
|
code-frontend-web
|
new
|
nobody
|
defect
|
major
|
| #1000 |
add 'Tahoe Explorer' (JavaScript-based UI) to Tahoe
|
code-frontend-web
|
assigned
|
davidsarah
|
enhancement
|
major
|
| #1008 |
Unhandled error conditions disclose detailed information
|
code-frontend-web
|
new
|
|
defect
|
major
|
| #1029 |
download a subtree as an archive
|
code-frontend-web
|
new
|
|
enhancement
|
major
|
| #1047 |
Upload failures should report useful HTTP status lines
|
code-frontend-web
|
new
|
nobody
|
enhancement
|
major
|
| #1048 |
Expected exceptions should not include tracebacks
|
code-frontend-web
|
new
|
|
enhancement
|
major
|
| #1132 |
browser protocol handler or plugin for Tahoe URIs
|
code-frontend-web
|
new
|
|
enhancement
|
major
|
| #1136 |
don't run a web-API frontend if you don't need one
|
code-frontend-web
|
new
|
somebody
|
enhancement
|
major
|
| #1141 |
Cannot Delete Or Rename Files/Directories With Wacky Names
|
code-frontend-web
|
assigned
|
davidsarah
|
defect
|
major
|
| #1142 |
Unlikely XSS Potential in File Names in WUI
|
code-frontend-web
|
new
|
nobody
|
defect
|
major
|
| #1144 |
Loopy/Uninhibited/Overlarge Filename Makes Web Server Crump
|
code-frontend-web
|
new
|
nobody
|
defect
|
major
|
| #1173 |
cancelled downloads are marked incorrectly on the Recent Uploads/Downloads page
|
code-frontend-web
|
assigned
|
zooko
|
defect
|
major
|
| #1176 |
webapi should avoid using plaintext temporary file for uploads
|
code-frontend-web
|
new
|
|
defect
|
major
|
| #1198 |
Bogus tub location causes introducer error
|
code-frontend-web
|
new
|
|
defect
|
major
|
| #1211 |
client should be able to test share placement
|
code-frontend-web
|
new
|
somebody
|
enhancement
|
major
|
| #1215 |
add CORS support
|
code-frontend-web
|
new
|
|
enhancement
|
major
|
| #1221 |
operation stats are not sufficient to understand what's wrong
|
code-frontend-web
|
new
|
|
defect
|
major
|
| #1234 |
UnrecoverableFileError message should say which file it refers to
|
code-frontend-web
|
assigned
|
davidsarah
|
defect
|
major
|
| #1265 |
New Visualizer is insufficiently labelled/documented (plus layout problem)
|
code-frontend-web
|
assigned
|
zooko
|
defect
|
major
|
| #1369 |
allow static HTML files to be transcluded into WUI Welcome and directory listing pages
|
code-frontend-web
|
new
|
|
defect
|
major
|
| #1434 |
DYHB requests misrendered in download visualization
|
code-frontend-web
|
new
|
warner
|
defect
|
major
|
| #1436 |
web interface using wrong address / port number when doing ssh port forwarding
|
code-frontend-web
|
new
|
|
defect
|
major
|
| #1462 |
add legend to Recent Uploads and Downloads page, explain LIT
|
code-frontend-web
|
new
|
T_X
|
defect
|
major
|
| #1485 |
web-API: POSTs and GETs should be to distinct URLs
|
code-frontend-web
|
assigned
|
davidsarah
|
defect
|
major
|
| #1499 |
when you create a mutable file in the WUI you should get a nice user interface page back
|
code-frontend-web
|
new
|
|
enhancement
|
major
|
| #1502 |
WUI: make type field more regular, and show SDMF vs MDMF
|
code-frontend-web
|
new
|
|
defect
|
major
|
| #1550 |
new/alternate download visualizer
|
code-frontend-web
|
new
|
drewp
|
enhancement
|
major
|
| #1551 |
WUI: the Upload results page should have both view and download links
|
code-frontend-web
|
new
|
|
defect
|
major
|
| #1588 |
I want to trigger backups through the WUI.
|
code-frontend-web
|
new
|
|
enhancement
|
major
|
| #1639 |
'Return to file/directory' link from file check results gives an error
|
code-frontend-web
|
assigned
|
davidsarah
|
defect
|
major
|
| #1649 |
WUI: the error message page for a writeable file/directory nonobviously includes the write cap
|
code-frontend-web
|
assigned
|
davidsarah
|
defect
|
major
|
| #1664 |
webapi fails to handle all TCP disconnects: "Request.finish called on a request after its connection was lost; use Request.notifyFinish to keep track of this."
|
code-frontend-web
|
new
|
nobody
|
defect
|
major
|
| #1665 |
Brainstorm webapi vulnerabilities between the operator and a user and between users.
|
code-frontend-web
|
new
|
|
task
|
major
|
| #1797 |
WUI: view content in an HTML5 sandboxed iframe
|
code-frontend-web
|
new
|
|
defect
|
major
|
| #1798 |
Segregate gateway HTTP ports: one for raw bytes and one for generated WUI pages
|
code-frontend-web
|
new
|
freddyb
|
defect
|
major
|
| #1859 |
Proof-of-concept attack: Upload and execute attacker controlled js from any domain.
|
code-frontend-web
|
new
|
davidsarah
|
defect
|
major
|
| #1904 |
filenames leak into log files from rename (and other web-API operations that take filenames)
|
code-frontend-web
|
new
|
|
defect
|
major
|
| #2125 |
don't cache failures!
|
code-frontend-web
|
new
|
|
defect
|
major
|
| #2385 |
node web server should use DHE/ECDHE suites automatically
|
code-frontend-web
|
new
|
j3i
|
enhancement
|
major
|
| #3852 |
500 error from JSON welcome page
|
code-frontend-web
|
new
|
|
defect
|
major
|
| #3929 |
Error reading directory: 'coroutine' object has no attribute 'addCallback'
|
code-frontend-web
|
new
|
|
defect
|
major
|
| #451 |
webdav frontend
|
code-frontend-web
|
new
|
|
enhancement
|
normal
|
| #824 |
WUI pages lack correct XHTML 1.0 Transitional declarations
|
code-frontend-web
|
assigned
|
daira
|
defect
|
normal
|
| #1171 |
add regression test for shnums: "e,r,r,o,r"
|
code-frontend-web
|
reopened
|
warner
|
defect
|
normal
|
| #1203 |
/storage is insufficiently verbose when no crawl running
|
code-frontend-web
|
new
|
nobody
|
defect
|
normal
|
| #1375 |
the performance stats for each upload or download are undiscoverable
|
code-frontend-web
|
new
|
tarcieri
|
defect
|
normal
|
| #1386 |
KeyError: 'file' if the local file is removed after selection and before Submit
|
code-frontend-web
|
new
|
daira
|
defect
|
normal
|
| #1492 |
introducer status page is ugly
|
code-frontend-web
|
new
|
|
defect
|
normal
|
| #1541 |
Add ?t=xml parameter for getting file statistics
|
code-frontend-web
|
new
|
bibilthaysose
|
enhancement
|
normal
|
| #1645 |
UnrecoverableFileError HTML message should include a link to check the file
|
code-frontend-web
|
new
|
|
enhancement
|
normal
|
| #1666 |
test that an upload with no Content-Length (and not chunked) gives HTTP 411 Length Required
|
code-frontend-web
|
new
|
|
defect
|
normal
|
| #1706 |
The "Report!" button in the "Report an Incident" form field redirects to a misleading/incomplete message
|
code-frontend-web
|
new
|
zancas
|
defect
|
normal
|
| #1709 |
order nodes by nickname instead of peerid on the welcome page
|
code-frontend-web
|
new
|
|
enhancement
|
normal
|
| #1726 |
new visualizer needs labels with units
|
code-frontend-web
|
new
|
warner
|
defect
|
normal
|
| #1727 |
New Visualizer has layout bug where serverids and other things scribble over each other
|
code-frontend-web
|
new
|
warner
|
defect
|
normal
|
| #1728 |
add link to docs/frontends/download-status.rst from the download status page
|
code-frontend-web
|
assigned
|
Lcstyle
|
enhancement
|
normal
|
| #1764 |
tahoe webapi gives HTTP 410 Gone for files that may actually come back
|
code-frontend-web
|
new
|
ChosenOne
|
defect
|
normal
|
| #1799 |
Document how to distinguish exceptions from JSON, or encode exceptions as JSON
|
code-frontend-web
|
new
|
|
defect
|
normal
|
| #1809 |
WUI: upload to directory fails due to no file name
|
code-frontend-web
|
new
|
|
defect
|
normal
|
