Find a file
rr- 4ca7c49239 client/auth: fix masstag privilege bypass
Visiting mass-tag URL directly ignored masstag privileges and showed
tag/untag controls (although didn't show the controls in the header).
After this change, bypassing mass tag privileges got a little bit
harder. (It's still possible for the user to talk directly to the API
after all.)
2016-08-23 23:12:29 +02:00
client client/auth: fix masstag privilege bypass 2016-08-23 23:12:29 +02:00
server server/posts: make anon snapshots for anon uploads 2016-08-22 20:07:39 +02:00
.gitignore server/tests: switch to pytest 2016-04-15 18:00:06 +02:00
API.md server/snapshots: rewrite 2016-08-16 21:51:25 +02:00
config.yaml.dist server/db: allow full DSN; use memdb in tests 2016-08-16 21:42:09 +02:00
INSTALL.md server/db: allow full DSN; use memdb in tests 2016-08-16 21:42:09 +02:00
README.md docs/readme: update links to roadmap 2016-04-17 17:24:19 +02:00

This repository is under the process of being rewritten. Stay tuned! You can check the current progress on client here and server here.

The reasons behind this rewrite include:

  • Improving user experience: better upload form, larger thumbnails, making top navigation stay out of user way. Maybe other goodies!
  • Finally having good, well-documented REST API.
  • Simplifying user registration.
  • Replacing PHP with Python 3.5.
  • Replacing prior JS mess with proper MVC.
  • Replacing MySQL (MariaDB) with Postgres.
  • Replacing composer, npm, mod_rewrite (=Apache), imagick, ffmpeg or gnash and pdo_mysql with just pip, npm and ffmpeg.
  • Replacing grunt with npm scripts.
  • Making hosting more flexible: offer simple self hosted application that can be combined with any reverse proxy.