1
0
Fork 0
mirror of https://github.com/transmission/transmission synced 2025-02-25 23:42:30 +00:00
No description
Find a file
Mike Gelfand 523d8c1317 Tracker error XSS in inspector (web client)
Tracker error messages are inadequately output encoded when rendered by the
tracker information page inside the WebUI, allowing a malicious tracker to
inject an XSS payload into the page. Esploiting this issue allows an
attacker to supply arbitrary client-side code that will ultimately be
rendered and executed within the end user's web browser.

Found by Rory McNamara (Gotham Digital Science). CVE pending.
2018-04-17 13:25:49 +03:00
.tx Add Transifex configuration file 2015-01-12 06:44:28 +00:00
cli Switch to HTTPS links, adjust wiki links where possible 2018-01-16 01:12:59 +03:00
cmake cmake: link against libmbedcrypto if available 2018-02-23 20:48:14 -08:00
daemon Switch to HTTPS links, adjust wiki links where possible 2018-01-16 01:12:59 +03:00
extras Make host validation not depend on CSRF being enabled (see ) 2018-01-17 23:38:12 +03:00
gtk Switch to HTTPS links, adjust wiki links where possible 2018-01-16 01:12:59 +03:00
libtransmission Adjust CFBundleVersion format to fix Sparkle update check 2018-04-17 13:25:49 +03:00
m4 Work around "error: m4_copy: won't overwrite defined macro: glib_DEFUN" on 2018-01-17 01:00:49 +03:00
macosx Adjust CFBundleVersion format to fix Sparkle update check 2018-04-17 13:25:49 +03:00
po , : Fix "make check" for po files 2015-01-01 14:48:10 +00:00
qt Qt: Fix bad downloaded percentage in DetailsDialog 2018-04-06 22:47:11 +03:00
third-party When building with Xcode, link against 'libcrypto.dylib' instead of 'libcrypto.0.9.8.dylib' 2018-01-17 01:14:52 +03:00
Transmission.xcodeproj Adjust CFBundleVersion format to fix Sparkle update check 2018-04-17 13:25:49 +03:00
utils Switch to HTTPS links, adjust wiki links where possible 2018-01-16 01:12:59 +03:00
web Tracker error XSS in inspector (web client) 2018-04-17 13:25:49 +03:00
.gitignore : Generate REVISION file and use it in case of missing reliable source 2015-04-24 19:14:56 +00:00
.gitmodules Add libevent submodule (should hopefully fix Mac build) 2018-01-17 00:36:34 +03:00
AUTHORS Switch to HTTPS links, adjust wiki links where possible 2018-01-16 01:12:59 +03:00
autogen.sh
ChangeLog
CMakeLists.txt Bump version to 2.93+, fix NEWS date 2018-02-22 23:44:19 +03:00
configure.ac Merge pull request from neheb/patches 2018-04-06 22:34:11 +03:00
COPYING Update user-facing copyright years 2016-02-27 23:18:02 +00:00
Makefile.am Include Windows patches into source archive, otherwise CMake build fails 2016-02-28 06:16:04 +00:00
NEWS Bump version to 2.93+, fix NEWS date 2018-02-22 23:44:19 +03:00
README Switch to HTTPS links, adjust wiki links where possible 2018-01-16 01:12:59 +03:00
transmission-gtk.spec.in Switch to HTTPS links, adjust wiki links where possible 2018-01-16 01:12:59 +03:00
uncrustify.cfg
update-version-h.sh Adjust CFBundleVersion format to fix Sparkle update check 2018-04-17 13:25:49 +03:00

ABOUT

  Transmission is a fast, easy, and free BitTorrent client.
  It comes in several flavors:

    * A native Mac OS X GUI application
    * GTK+ and Qt GUI applications for Linux, BSD, etc.
    * A headless daemon for servers and routers
    * A web UI for remote controlling any of the above

  Visit https://transmissionbt.com/ for more information.

BUILDING

  Transmission has an Xcode project file (Transmission.xcodeproj)
  for building in Xcode.

  For a more detailed description, and dependancies, visit:
  https://github.com/transmission/transmission/wiki

  Building a Transmission release from the command line:

    $ xz -d -c transmission-2.11.tar.xz | tar xf -
    $ cd transmission-2.11
    $ ./configure
    $ make
    $ sudo make install

  Building Transmission from the nightly builds:

    Download a tarball from https://build.transmissionbt.com/job/trunk-linux-inc/
    and follow the steps from the previous section.

    If you're new to building programs from source code, this is typically 
    easier than building from SVN.

  Building Transmission from SVN (First Time):

    $ svn co svn://svn.transmissionbt.com/Transmission/trunk Transmission
    $ cd Transmission
    $ ./autogen.sh
    $ make
    $ sudo make install

  Building Transmission from SVN (Updating):

    $ cd Transmission
    $ make clean
    $ svn up
    $ ./update-version-h.sh 
    $ make
    $ sudo make install

  Notes for building on Solaris' C compiler:  User av reports success with
  this invocation: ./configure CC=c99 CXX=CC CFLAGS='-D__EXTENSIONS__ -mt'