mirror of
https://github.com/retspen/webvirtcloud
synced 2026-11-08 11:16:47 +00:00
The VNC page's token travels in the websocket URL, so nginx's access log and anyone who saw the URL had it for 120 s, and it opened the console as a bearer token. novncd now also wants the session cookie of the token's user. Its refusals were a warning without a user or an address: they now name the client address (nginx sends X-Real-IP to novncd too) and leave a Logs row "VNC console refused: reason". |
||
|---|---|---|
| .. | ||
| daemon | ||
| nginx | ||
| runit | ||
| systemd | ||
| install-lib.sh | ||
| requirements-ldap.txt | ||
| requirements.txt | ||
| test-vm.xml | ||
| test_install_lib.sh | ||
| webvirt-offsite.sh | ||