<feed xmlns='http://www.w3.org/2005/Atom'>
<title>yacy/bin/clearall.sh, branch master</title>
<subtitle>YaCy search server with some extra patches
</subtitle>
<id>https://git.fennell.dev/yacy/atom?h=master</id>
<link rel='self' href='https://git.fennell.dev/yacy/atom?h=master'/>
<link rel='alternate' type='text/html' href='https://git.fennell.dev/yacy/'/>
<updated>2020-12-21T23:46:47Z</updated>
<entry>
<title>fixed apicall call method parameters</title>
<updated>2020-12-21T23:46:47Z</updated>
<author>
<name>Michael Peter Christen</name>
<email>mc@yacy.net</email>
</author>
<published>2020-12-21T23:46:47Z</published>
<link rel='alternate' type='text/html' href='https://git.fennell.dev/yacy/commit/?id=01cc32217fb2dccaf20284261579addca0d42474'/>
<id>urn:sha1:01cc32217fb2dccaf20284261579addca0d42474</id>
<content type='text'>
and verification in transaction manager
which did not have and exception for localhost/basic authentication</content>
</entry>
<entry>
<title>Going back to basic authentication for console/shell commands</title>
<updated>2020-12-09T01:36:55Z</updated>
<author>
<name>Michael Peter Christen</name>
<email>mc@yacy.net</email>
</author>
<published>2020-12-09T01:36:55Z</published>
<link rel='alternate' type='text/html' href='https://git.fennell.dev/yacy/commit/?id=e54ab39958301a320e2e426410cef1edd123327d'/>
<id>urn:sha1:e54ab39958301a320e2e426410cef1edd123327d</id>
<content type='text'>
This does not affect security because:
- it is going to localhost only
- only users who have already access to the pw hash can do this
- no clear text pw is transmitted because that is not stored anywhere
The switch to basic is required because these commands are required
in the context of hosting on root servers and docker containers
where a password change must be done. But the password shell command
was not working without password which made the concept unusable.
This deficit made it virtually impossible for root server operators
to use YaCy because they had been unable to set up a proper password.
</content>
</entry>
<entry>
<title>Enforced access controls on some administrative actions.</title>
<updated>2017-03-26T09:48:00Z</updated>
<author>
<name>luccioman</name>
<email>luccioman@users.noreply.github.com</email>
</author>
<published>2017-03-26T09:48:00Z</published>
<link rel='alternate' type='text/html' href='https://git.fennell.dev/yacy/commit/?id=cde237b68763c542da20038e5f62bea341ae1d37'/>
<id>urn:sha1:cde237b68763c542da20038e5f62bea341ae1d37</id>
<content type='text'>
 - ensure use of HTTP POST method : HTTP GET should only be used for
information retrieval and not to perform server side effect operations
(see HTTP standard https://tools.ietf.org/html/rfc7231#section-4.2.1)
 - a transaction token is now required for these administrative form
submissions to ensure the request can not be included in an external
site and performed silently/by mistake by the user browser</content>
</entry>
<entry>
<title>Changes to improve compatibility with OpenBSD. (see</title>
<updated>2015-02-23T21:54:49Z</updated>
<author>
<name>Marc Nause</name>
<email>marc.nause@audioattack.de</email>
</author>
<published>2015-02-23T21:54:49Z</published>
<link rel='alternate' type='text/html' href='https://git.fennell.dev/yacy/commit/?id=53e4ae65d0bca0ff8fb6b2a766742de87d1691d6'/>
<id>urn:sha1:53e4ae65d0bca0ff8fb6b2a766742de87d1691d6</id>
<content type='text'>
http://forum.yacy-websuche.de/viewtopic.php?f=8&amp;t=5503)</content>
</entry>
<entry>
<title>Fix for http://mantis.tokeek.de/view.php?id=432</title>
<updated>2014-08-25T20:47:33Z</updated>
<author>
<name>Marc Nause</name>
<email>marc.nause@audioattack.de</email>
</author>
<published>2014-08-25T20:47:33Z</published>
<link rel='alternate' type='text/html' href='https://git.fennell.dev/yacy/commit/?id=8d1b66accca613e0b79f075cda336c95be6bcf57'/>
<id>urn:sha1:8d1b66accca613e0b79f075cda336c95be6bcf57</id>
<content type='text'>
*) replaced all shebangs with more universal versions</content>
</entry>
<entry>
<title>fixed clear scripts</title>
<updated>2012-10-11T08:16:37Z</updated>
<author>
<name>Michael Peter Christen</name>
<email>mc@yacy.net</email>
</author>
<published>2012-10-11T08:16:37Z</published>
<link rel='alternate' type='text/html' href='https://git.fennell.dev/yacy/commit/?id=f3fc8eac809641f915be2427c3476e0ba8eb7df9'/>
<id>urn:sha1:f3fc8eac809641f915be2427c3476e0ba8eb7df9</id>
<content type='text'>
</content>
</entry>
<entry>
<title>fix for clear commands</title>
<updated>2011-09-08T12:54:10Z</updated>
<author>
<name>orbiter</name>
<email>orbiter@6c8d7289-2bf4-0310-a012-ef5d649a1542</email>
</author>
<published>2011-09-08T12:54:10Z</published>
<link rel='alternate' type='text/html' href='https://git.fennell.dev/yacy/commit/?id=2e8c8ebf546e546695c9981d2c979897a3fdfe86'/>
<id>urn:sha1:2e8c8ebf546e546695c9981d2c979897a3fdfe86</id>
<content type='text'>
git-svn-id: https://svn.berlios.de/svnroot/repos/yacy/trunk@7939 6c8d7289-2bf4-0310-a012-ef5d649a1542
</content>
</entry>
<entry>
<title>added a clearall.sh script that deletes the complete index and everything else that belongs to crawling</title>
<updated>2011-03-20T08:36:29Z</updated>
<author>
<name>orbiter</name>
<email>orbiter@6c8d7289-2bf4-0310-a012-ef5d649a1542</email>
</author>
<published>2011-03-20T08:36:29Z</published>
<link rel='alternate' type='text/html' href='https://git.fennell.dev/yacy/commit/?id=18ec7fe53cf7cae39ba2be0c2598b6103ba615a9'/>
<id>urn:sha1:18ec7fe53cf7cae39ba2be0c2598b6103ba615a9</id>
<content type='text'>
git-svn-id: https://svn.berlios.de/svnroot/repos/yacy/trunk@7611 6c8d7289-2bf4-0310-a012-ef5d649a1542
</content>
</entry>
</feed>
