webssh2: v0.4.7-pre-4

0.4.7-pre-4 (2022-08-03)

Miscellaneous Chores

• release 0.4.7-pre-4 (7d4ba87)

webssh2: v0.4.7-pre-3

0.4.7-pre-3 (2022-08-03)

Miscellaneous Chores

• release 0.4.7-pre-3 (0c78c1f)
• release 0.4.7-pre-3 (b29242d)
• release 0.4.7-pre-3 (6c7d242)

webssh2: v0.4.7-pre-2

0.4.7-pre-2 (2022-08-02)

⚠ BREAKING CHANGES

• validate referer to /reauth is valid
• bump xterm to 4.18.0
• consistent logging messages see #286
• config system changes #284 (#285)

Features

• add additional params for POST requests #290 (46c1560)
• add additional vars to POST requests #290 (0a4e419)
• add fontFamily, letterSpacing, lineHeight (97f3088)
• add fontSize option #292 (5e78812)
• config system changes #284 (#285) (9c99b09)
• consistent logging messages see #286 (50cfcb9)
• credentials over http post for #290 (5b8f88c)
• reorder viewport setup at ssh handshake #292 (140e1e2)
• validate referer to /reauth is valid (0dcaa6e)

Bug Fixes

• Fix the parameter passing problem of setDefaultCredentials to make it perform data initialization normally (#288) (40cbb35)
• invalid css in style.css (ffab534)

package

• bump xterm to 4.18.0 (84c09ec)

🐣 0.4.6🐣

Fixes

• update read-config-ng to 3.0.5, fixes #277

0.4.5

Fixes

• Update socket.io to 4.2.0
• Update read-config-ng to 3.0.4

0.4.4

Fixes

• Add ./node_modules to .dockerignore #240 thanks @UncleSamSwiss
• validator to 13.7.0 to mitigate potential Regular Expression Denial of Service (ReDoS)
• cidr-matcher should be re-installed to pickup >[email protected] due to prototype pollution vulnerability
• Update xterm.js to 4.15.0 #261
• Replace deprecated term.setOptions with term.options

Changes

• update README.md for additional Docker methods thanks @Utopiah

0.4.3

• update dependencies
  • ssh2 to 1.4.0 to mitigate potential command injection in windows

0.4.2 release (#260)

changes

• update dependencies
  • socket.io to 4.1.1
  • read-config-ng to 3.0.2
  • debug to 4.3.1

0.4.0 Release

BREAKING

• Disabled ssh.serverlog.client option, this disables the POC which allowed for logging of the data sent between the client/server to the console.log.
• Dropping support for node versions under 14

Changes

• Removed HTML menu code from ./app/server/socket.js, the menu is now fully laid out in the ./app/client/src/index.html and the option elements are hidden by default. Not sure why it wasn't done this way from the start, but there it is.
• Updated socket.io to v4.1.1
• Client javascript ./app/client/src/js/index.ts is now built on TypeScript (npm run build will generate javascript for client and place into app/client/public/webssh2.bundle.js as before)
• Build environment changes
  • removed unused xterm-addon-search, xterm-addon-weblinks, standard, postcss-discard-comments
  • added prettier 2.3.0, typescript modules, socket.io-client 4.1.1, airbnb linting tools

Added

• Lookup ip address for hostname in URL, fixes #199 thanks to @zwiy
• Ability to override Authorization: Basic header and replace with credentials specified in config.json fixes #243. New config.json option user.overridebasic

CONTRIBUTING

In this release, we're trying our best to conform to the Airbnb Javascript Style Guide. I'm hoping this will make contributions easier and keep the code readable. I love shortcuts more than anyone but I've found when making changes to code I've not looked at in a while, it can take me a few momements to deconstruct what was being done due to readbility issues. While I don't agree with every decision in the style guide (semi-colons, yuk), it is a good base to keep the code consistent.

If you've not used it before, I recommend installing the vscode extensions for that and Prettier and getting familiar. The autocorrections are great (especially if you hate dealing with semi-colons...)

As of 0.4.0-testing-0, the client code is written in TypeScript. It's not that much different from JavaScript, and the introduction strong typing will ultimately help to produce better code. Eventually we want to move the whole project to TypeScript but that make take a bit more time. Take a moment to look at ./app/client/src/js/index.ts to see what TypeScript looks like.

Release 0.3.1

Last legacy supported version

This version should be the last one to support less than node 10. When possible we will continue to update the 0.3.x branch, however it's becoming increasingly difficult to maintain compatibility as most modules are moving past supporting these older versions.

Please note the build environment requires at least node 10 to work properly.

BREAKING

• Ability to configure CORS settings for socket.io see #240 for more information on how this may break existing deployments. Default settings in example config.json are currently permissive http.origins: ["*:*"] please note that if a config.json is not present, the default is `http.origins: ["localhost:2222"]

Added

• Safe Shutdown Feature - thanks to @edgarogh
  • Sending SIGINT or SIGTERM to node process responsible for WebSSH2 or Docker process will result in a "safe" shutdown
  • Timer is configured in config.safeShutdownDuration
• feat: Use docker build to create multi-arch images (#202)

Fixed

• obey host ssh.host in config fixes #190

Changed

• config.json.sample: allowreauth now defaults to false fixes #238
• update ssh2 to 0.8.8 -> 0.8.9 - comparison at ssh2 repo
• update xterm to 4.12.0 comparsion at xtermjs repo
• update read-config-ng to 3.0.2
• update morgan to 1.10.0
• update debug to 4.3.1
• update express-session to 1.17.1
• update validator to 13.6.0
• development tools updates (build environment requires minimum of Node 10, only needed for customization)
  • update @fortawesome/fontawesome-svg-core to 1.2.35
  • update @fortawesome/free-solid-svg-icons to 5.15.3
  • update copy-webpack-plugin to 8.1.1
  • update cross-env to 7.0.3
  • update css-loader to 5.2.4
  • update file-loader to 6.2.0
  • update mini-css-extract-plugin to 1.6.0
  • update postcss-discard-comments to 5.0.0
  • update snazzy to 9.0.0
  • update standard to 16.0.3
  • update standard-version to 9.3.0
  • update style-loader to 2.0.0
  • update terser-webpack-plugin to 5.1.1
  • update url-loader to 4.1.1
  • update webpack to 5.37.0
  • update webpack-cli to 4.7.0
  • update webpack-merge to 5.7.3
  • update webpack-stream to 6.1.2
  • update xterm-addon-fit to 0.5.0
  • update xterm-addon-search to 0.8.0
  • update xterm-addon-web-links to 0.4.0
  • update ssri from 6.0.1 to 6.0.2 #233
  • update hosted-git-info from 2.8.5 to 2.8.9 #237
  • update lodash from 4.17.19 to 4.17.21 #236
  • update handlebars from 4.7.6 to 4.7.7 #235
  • update y18n from 4.0.0 to 4.0.1 #230
  • update elliptic from 6.5.3 to 6.5.4 #228
  • update ini from 1.3.5 to 1.3.8 #217