Commit Graph
6 Commits
Author SHA1 Message Date
Alhuda Khan 064fa95318 enforce allowed hosts when an auth module accepts the login
The Allow list was only checked in CZNC::AuthUser() after the core
password check, so logins accepted by imapauth, cyrusauth or certauth
(including SASL EXTERNAL) ignored it. Check it in CAuthBase::AcceptLogin()
and CClient::AcceptSASLLogin() instead.
2026-10-23 20:48:13 +05:30
Alhuda Khan 2b7e1b820b imapauth: quote LOGIN arguments and refuse passwords with line breaks 2026-10-20 14:18:47 +05:30
Alhuda Khan 71dd0e0f88 zncstring: use openssl RAND_bytes for RandomString when available 2026-10-18 12:22:56 +05:30
Alhuda Khan 5916955b80 zncstring: generate RandomString with a CSPRNG instead of rand() 2026-10-14 15:10:53 +05:30
Alhuda Khan 16908dc4aa utils: fix size_t underflow in FormatTime %f padding 2026-10-14 11:32:00 +05:30
Alhuda Khan 942e458bf5 cast to unsigned char for ctype calls on signed-char input 2026-10-11 23:54:28 +05:30