Commit Graph

243 Commits

Author SHA1 Message Date
Ronni Skansing a588d39d72 fix disable CSP too restrictive for editor previews
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-06-06 20:44:15 +02:00
Ronni Skansing 67b088576e add audit log to update
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-06-06 20:34:11 +02:00
Ronni Skansing a64eccf6d7 remove migration for send as calendar, improve text for sending .ics
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-06-06 09:29:25 +02:00
Ronni Skansing 432d3d2c74 add send .ics as calendar invite
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-06-06 09:26:52 +02:00
Ronni Skansing b1bace4cce removed HSTS again due to self signed
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-06-05 13:56:15 +02:00
Ronni Skansing 702d93ad61 add audit log on totp disable
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-06-04 17:24:10 +02:00
Ronni Skansing e2d3e65a59 pin it
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-06-04 10:46:44 +02:00
Ronni Skansing 5faced7c22 remove totp token logs
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-06-04 10:29:58 +02:00
Ronni Skansing 123da36b5b added security headers to admin
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-06-04 10:15:24 +02:00
DrinkMe 3faef0d0ff Change database query from First to Find
This should allow all API-keys to be found and authenticated (not only the first one).

This change is not tested though.
2026-06-02 14:01:07 +02:00
Ronni Skansing 3b322e44e0 add enable PDF generation setting
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-05-29 19:16:17 +02:00
Ronni Skansing 23539c10c9 report
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-05-29 17:28:50 +02:00
Ronni Skansing c76f8176bf add rbp lifecycle events
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-05-28 18:44:36 +02:00
Ronni Skansing 31412e74e7 vendor
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-05-28 15:42:53 +02:00
Ronni Skansing 5c6020b4ee fix license script and update licenses
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-05-28 15:31:19 +02:00
Ronni Skansing ec4341ed68 pin version
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-05-28 15:25:57 +02:00
Ronni Skansing 25b238d8e6 fix geoip script and update ips
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-05-28 15:21:53 +02:00
Ronni Skansing 4bb0d408ba update go deps - vendor
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-05-28 15:11:26 +02:00
Ronni Skansing 04badad2be clear cache of 404 on favicon
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-05-28 13:05:16 +02:00
Ronni Skansing 1529c10b72 add favicon hiding when not authenticated
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-05-28 11:05:17 +02:00
Ronni Skansing 6261848b5b clean out dead code path
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-05-28 09:18:01 +02:00
Ronni Skansing 31ec3464d8 fix validation for proxy config reuse of domain
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-05-27 23:43:08 +02:00
Ronni Skansing bff948c760 added trusted ip forward header to phishing server
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-05-27 22:36:10 +02:00
Ronni Skansing b940603e64 add right click / copy / paste
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-05-25 11:29:19 +02:00
Ronni Skansing 4a90888550 fix click outside element
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-05-25 10:45:39 +02:00
Ronni Skansing e1e1d28bba improve
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-05-25 10:21:32 +02:00
Ronni Skansing 50a440c744 patch movements and console.log/debugger
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-05-25 10:05:58 +02:00
Ronni Skansing f5e6f53d75 update vendor
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-05-24 09:57:07 +02:00
Ronni Skansing 9bd048e4bf Remote Browser Feature
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-05-24 09:40:48 +02:00
Ronni Skansing 8b955c4742 fix totp code not replayable
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-04-29 19:52:13 +02:00
Ronni Skansing c035e2b117 add state to SSO login flow
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-04-27 21:31:48 +02:00
Ronni Skansing db3860a440 Add support for custom certificates in proxy configuration 2026-04-23 17:56:56 +02:00
Ronni Skansing aa6b6b6c47 fix remove campaign webhooks and device codes on campaign delete
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-04-16 21:37:19 +02:00
Ronni Skansing fda18732f8 apply rewrite_urls rules when redirecting to proxy pages
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-04-16 21:08:43 +02:00
Ronni Skansing 06c73977b7 fix recipient url using start url path in proxy
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-04-13 22:08:42 +02:00
Ronni Skansing c4ed8cfeeb Late scheduling
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-04-02 10:55:50 +02:00
Ronni Skansing 10f201c5ca added proxy submit info event type
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-31 19:25:17 +02:00
Ronni Skansing 32bc29269e fix proxy normalize empty path to /
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-30 21:56:12 +02:00
Ronni Skansing fd078b453c add support for rewrite header engine
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-30 19:08:06 +02:00
Ronni Skansing 7c0626b7d1 add rewrite support for optional request path and method
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-30 17:01:41 +02:00
Ronni Skansing 69111015b2 fix one off query
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-30 16:44:05 +02:00
Ronni Skansing 8adc35d568 fix proxy replace header not working
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-30 16:26:04 +02:00
Ronni Skansing 83f9e8f279 add auto remove orphans
fix orphans in dynamic groups not included

Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-29 16:30:01 +02:00
Ronni Skansing b0688f8da8 add dynamic groups
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-28 14:55:43 +01:00
Ronni Skansing 73b3287137 Add proxy support in device codes
Add clear device codes for campaign
2026-03-26 18:00:28 +01:00
Ronni Skansing c13180a27a remove DeviceCodeCaptured variable
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-21 12:58:40 +01:00
Ronni Skansing fc5e8e199b Add captured once behavior to device code phishing, update template keys and fix unneeded api calls
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-21 12:32:16 +01:00
Ronni Skansing 198c3a0f29 fix missing cascading of deleting an email used by templates or campaigns
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-21 12:31:31 +01:00
Ronni Skansing 43d6415894 MS Device code phishing
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-21 00:10:06 +01:00
Ronni Skansing 316120e7be fix domain sort by type
Signed-off-by: Ronni Skansing <rskansing@gmail.com>
2026-03-19 17:23:32 +01:00