mirror of
https://github.com/retspen/webvirtcloud
synced 2026-11-08 19:26:48 +00:00
The VNC page's token travels in the websocket URL, so nginx's access log and anyone who saw the URL had it for 120 s, and it opened the console as a bearer token. novncd now also wants the session cookie of the token's user. Its refusals were a warning without a user or an address: they now name the client address (nginx sends X-Real-IP to novncd too) and leave a Logs row "VNC console refused: reason". |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| test_consolecallback.py | ||
| test_layouts.py | ||
| test_live_serial.py | ||
| test_socketiod.py | ||
| test_socketiod_child.py | ||
| test_sshtunnels.py | ||
| test_views.py | ||