berthubert / trifecta

educational image sharing website built on a combination of modern C++, web and database technologies

berthubert/trifecta Issues

feature request: Option to strip EXIF data
Updated 2 months ago
add UI-visible versioning to trifecta binary (and check if there's an update available?)
Updated 2 months ago2
sign-in email should mention account name and IP address
Updated 3 months ago
Logging to standard output is not sanitized, leading to possible forged logs or unexpected behavior
Closed 6 months ago1
Don't load my images (and other things) when not needed
Closed 6 months ago
Feature request: Delete button (and functionality) in Admin screen on the right of each image at the list of images.
Closed 6 months ago
Current password is not required when changing email address
Closed 6 months ago1
Malicious requests for many overlapping byte ranges of large images risk OOM
Closed 6 months ago4
Overlong Cookie header takes long time to parse, leading to potential DoS
Closed 6 months ago
Make TLS only mode with better cookies
Closed 6 months ago1
Suggested nginx X-Real-IP config assumes nginx is behind another proxy
Closed 6 months ago1
Disable user is not hooked up
Closed 6 months ago
ID parameters from URL are not validated before being included in Fetch requests
Closed 6 months ago
Trifecta is vulnerable to Brotli ("zip") bombs if Brotli support is enabled
Updated 6 months ago
Invalid POSTed UTF-8 is accepted and stored, causing JSON GET endpoints to fail
Updated 6 months ago2
Add text pastebin
Updated 6 months ago3
Blocking-threads design is susceptible to Slowloris-style DoS attacks without nginx
Closed 6 months ago1
Mersenne Twister not suitable for security tokens
Closed 6 months ago2
Email address field in user panel is vulnerable to SMTP injection
Closed 6 months ago1
SVG images are accepted but not sanitized
Closed 6 months ago1
create link to admin/home/status page
Closed 6 months ago2
Nice error message when post is not available anymore
Updated 7 months ago
Add -pthread to CXXFLAGS
Closed 7 months ago4
need link to admin.html
Closed 7 months ago1
Delete image needs an 'are you sure'
Closed 7 months ago1
Delete user does not ask if you are sure
Closed 7 months ago1
Docker image
Closed 7 months ago2
There is no 'delete post'
Closed 7 months ago1
public/public until buttons/visibility
Closed 7 months ago1
Add drag'n'drop support
Closed 7 months ago1
Fix up title editing and captions
Closed 7 months ago1
Missing favicon
Closed 7 months ago2
500 error when loading page and not being logged in
Closed 7 months ago1
Better display large images
Closed 7 months ago
change wording of password1 and password2
Closed 7 months ago
Sessions should expire?
Updated 7 months ago
No error message if --html-dir is not specified correctly, or no files found
Updated 7 months ago
create alert when shooting yourself in the foot (ie. killing your own admin session)
Updated 7 months ago
Pasting username/password fails
Closed 7 months ago1