mirror of
https://github.com/PRVTPRO/Amnezia-Web-Panel.git
synced 2026-10-23 03:37:36 +09:00
Максимов Владимир Сергеевич
553f41926d
Security: - reject existing sessions for disabled and record-only accounts - enforce protocol and instance ownership when downloading configurations - store CAPTCHA answers server-side with expiry and replay protection - revoke share authorization after password changes or sharing is disabled - restrict language-switch redirects and harden language cookies - limit JSON backup size and improve input validation - quote Telemt command arguments and SSH upload paths - use private temporary directories for sudo operations and backup downloads - selectively update dependencies to address confirmed vulnerabilities Fixes and localization: - fix service worker and static asset version paths in PyInstaller builds - complete French, Persian, and Chinese translations to match all 687 keys - translate remaining English strings in those locales - add security, bundled-resource, and translation completeness regression tests - add English and Russian security reports documenting fixes and remaining risks
41 lines
683 B
Plaintext
41 lines
683 B
Plaintext
annotated-types==0.7.0
|
|
anyio==4.14.2
|
|
bcrypt==5.0.0
|
|
blinker==1.9.0
|
|
certifi==2026.2.25
|
|
cffi==2.0.0
|
|
click==8.3.1
|
|
colorama==0.4.6
|
|
cryptography==44.0.1
|
|
fastapi==0.120.1
|
|
Flask==3.1.3
|
|
h11==0.16.0
|
|
httpcore==1.0.9
|
|
httptools==0.7.1
|
|
httpx==0.25.2
|
|
idna==3.15
|
|
itsdangerous==2.2.0
|
|
Jinja2==3.1.6
|
|
MarkupSafe==3.0.3
|
|
multicolorcaptcha==1.2.0
|
|
paramiko==3.5.1
|
|
playwright==1.62.0
|
|
pillow==12.3.0
|
|
pycparser==3.0
|
|
pydantic==2.12.5
|
|
pydantic_core==2.41.5
|
|
PyNaCl==1.6.2
|
|
python-dotenv==1.2.2
|
|
python-multipart==0.0.32
|
|
python-telegram-bot==20.7
|
|
PyYAML==6.0.3
|
|
sniffio==1.3.1
|
|
starlette==0.49.1
|
|
typing-inspection==0.4.2
|
|
typing_extensions==4.15.0
|
|
uvicorn==0.34.0
|
|
watchfiles==1.1.1
|
|
websockets==16.0
|
|
Werkzeug==3.1.6
|
|
|