catborise 2e4e9c78f8 fix(console): a VNC token works only in its user's session; refusals reach the Logs page ... The VNC page's token travels in the websocket URL, so nginx's access log and anyone who saw the URL had it for 120 s, and it opened the console as a bearer token. novncd now also wants the session cookie of the token's user. Its refusals were a warning without a user or an address: they now name the client address (nginx sends X-Real-IP to novncd too) and leave a Logs row "VNC console refused: reason".		2026-11-05 18:08:03 +03:00
..
layouts	feat(console): typed text follows the VM's keyboard layout	2026-10-27 12:23:32 +03:00
migrations	Add app	2015-02-27 14:25:41 +02:00
templates	chore(console): the console pages load no jQuery	2026-11-05 12:37:51 +03:00
tests	fix(console): a VNC token works only in its user's session; refusals reach the Logs page	2026-11-05 18:08:03 +03:00
__init__.py	Add app	2015-02-27 14:25:41 +02:00
models.py	ci: replace super-linter with ruff	2026-10-04 01:08:11 +03:00
novncd	fix(console): a VNC token works only in its user's session; refusals reach the Logs page	2026-11-05 18:08:03 +03:00
socketiod	fix(console): the console daemons hold to what the console page allowed	2026-11-05 16:16:22 +03:00
sshtunnels.py	fix(console): a VNC console stays open while its screen does not change	2026-11-01 16:18:34 +03:00
tokens.py	fix(console): a VNC token works only in its user's session; refusals reach the Logs page	2026-11-05 18:08:03 +03:00
views.py	fix(console): the console daemons hold to what the console page allowed	2026-11-05 16:16:22 +03:00