vaultwarden/src
BlackDex 6d01aaa80f
Validate YUBICO_SERVER string (#3003)
If the `YUBICO_SERVER` is defined to an empty string, the whole yubikey
implementation doesn't work anymore.

This PR adds a check for this variable that it at least starts with `https://`.

Resolves #3003
2023-01-09 18:23:24 +01:00
..
api Removed unsafe-inline JS from CSP and other fixes 2023-01-09 18:23:23 +01:00
db Disable groups by default and Some optimizations 2022-12-18 20:32:06 +01:00
static Removed unsafe-inline JS from CSP and other fixes 2023-01-09 18:23:23 +01:00
auth.rs Fix recover-2fa not working. 2022-12-18 20:32:06 +01:00
config.rs Validate YUBICO_SERVER string (#3003) 2023-01-09 18:23:24 +01:00
crypto.rs Remove get_random_64() 2022-11-13 10:03:06 +01:00
error.rs Cleanups and Fixes for Emergency Access 2022-12-04 23:17:48 +01:00
mail.rs Cleanups and Fixes for Emergency Access 2022-12-04 23:17:48 +01:00
main.rs Remove ctrlc crate and some updates 2022-12-12 22:56:10 +01:00
ratelimit.rs Basic ratelimit for user login (including 2FA) and admin login 2021-12-22 21:48:49 +01:00
util.rs Removed unsafe-inline JS from CSP and other fixes 2023-01-09 18:23:23 +01:00