Sébastien Le Stum authored 4 years ago and Sébastien Blin committed 4 years ago

This feature is mostly a relicate from SFLPhone and introduced a remote
attack vector abusing the system() function weaknesses.

Provided that "sipEnabled" parameter is on in the remote target's
configuration, a malicious peer calling that remote target could
send SIP messages with a crafted "X-ring-url" string in order to
execute arbitrary shell commands on the target.

Header entry "X-ring-url" content is actually consumed by UrlHook
as arguments for the "x-www-browser" command executed using system().

By adding a shell escape sequence to circumvent existing arguments
sanitizing attempts, the malicious peer could execute any shell command
under remote peer user's identity and access sensitive information
available using its privileges.

Remove that feature altogether and enforce users that are relying on
that feature to migrate to Jami "plugins", which are more suitable
for introducing custom Jami behaviors.

Change-Id: I1d6d07771e2b5a7c7f2cb8fc838821106c0a6708

Aline Gondim Santos authored 4 years ago and Aline Gondim Santos committed 4 years ago

Change-Id: I5573606fae39567caf9026e9b1253b33588ab292

This reverts commit 7f215008.

Reason for revert: API design issue

Change-Id: I89b4bd9f59b95637acb7fd2199a4ccc43b1bda64

Aline Gondim Santos authored 4 years ago and Sébastien Blin committed 4 years ago

Change-Id: I61c074464e21344b2d7a1d64023f23bd96139c3b

Pierre Lespagnol authored 4 years ago and Sébastien Blin committed 4 years ago

Change-Id: I711a0b2f446f1620d7dff66945bf9295fd8372ac

Change-Id: I9dfa4ea09f34f4cb78820e1bcc5f6e9e3999b91b

Change-Id: Ia439bf5c70bd0c4be34c5fa960bb0797a039dd11

Change-Id: Ia13b0ecf0dc66fdcfbd49ead62ab1fac806ba537

These informations contains the participants in a conference and their
position in the rendered frame. The description of the conference is
sent via a SIP message with "application/confInfo+json" for mimetype.

Gitlab: #241
Change-Id: I5a3ad81d1d1b8ba9c9ce84e57745a59a747b8e6c

And some clean

Change-Id: I0e7a607b1749e608f0911f37065a0695df2d45b5

Because of the ConnectionManager, the daemon is now able to send
direct messages such as typing indications and read status. This
can be also used to move current features and improve it.

This patch is a first step to improve vCard syncing. The idea is
to send the vCard directly when a peer is connected. To avoid to
send the vCard everytime, a state is written in the cache directory.

In the future, a method to update the vCard as soon as the client
updates its profile will be possible.

Change-Id: I3801cbe04b3441f67ea6685aa2047e5a545958e5

This patch aims to improve the conference management for the host.
Now, the host is able to switch between 3 conferences layout:
1. The grid view (actual one) where all participants are shown
at the same height/width
2. The One big/Other in small which show one participant bigger than
the others
3. One participant in big

The daemon's API got two new methods:
+ setConferenceLayout() to switch between these layouts
+ setActiveParticipant() used in the 2 last layouts.

Change-Id: I3c16569e24d1b63331ffe9d79e35790a6ac47a0c

Change-Id: I67971c024245e95e870bfed320db160a9142ff39

Change-Id: I936dc5577014ac551b5f8726a3d3b12be46c091f

Gitlab: #225
Change-Id: I3874ba798ffa56c4f51b99048b9adb83f28bef16

Aline Gondim Santos authored 4 years ago and Adrien Béraud committed 4 years ago

Change-Id: I0919a3a78f4066122773a2ee9ab85d8e406e7e8f

Vladimir Stoiakin authored 4 years ago and Sébastien Blin committed 4 years ago

Change-Id: I767d7baa288edeeb93ceb16d6f2bbfff2b48d5c9
Reviewed-by: Sébastien Blin <sebastien.blin@savoirfairelinux.com>

Change-Id: Ieb7ee800f2b6f50f7ed2605a50b8dbeb32881645

Aline Gondim Santos authored 4 years ago and Adrien Béraud committed 4 years ago

fix preferences set in first plugin loading
small logic changes in libraries loading
related to: https://review.jami.net/c/ring-project/+/14433

Change-Id: I4730f279ee38d337e3ef94dd9562a5dfc1a63c32

Aline Gondim Santos authored 4 years ago and Adrien Béraud committed 4 years ago

Change-Id: I0bdffd53e9ba9463e3daacbc0641ab82e1ba89dd

Mohamed Amine Younes Bouacida authored 5 years ago and Adrien Béraud committed 4 years ago

Change-Id: If5296e71d4979962f71443fb298891202c8d2afe

Mohamed Amine Younes Bouacida authored 5 years ago and Adrien Béraud committed 4 years ago

Change-Id: I2946387c8f30151a9ce2b979e5d395600bfa7dae

Vladimir Stoiakin authored 6 years ago and Adrien Béraud committed 4 years ago

Change-Id: I331522a09257d4ae787893ff72c270886c1aa210
Reviewed-by: Sébastien Blin <sebastien.blin@savoirfairelinux.com>

Change-Id: Ic4a90183ae7589d4ddf7dd196e54cd6e8cba02f3

Change-Id: Ia59a7af9bccbf2b56acce6fb7ca8c41fcb8cdae5

Change-Id: I70bec5f07aa5f5773db8803f8f5409f12b42d5f6

- adds signal <AccountAvatarReceived> for <account_id> with base64
  <photo>
- handles incoming avatar during account authorization response in
  on success callback by emitting <AccountAvatarReceived>

Change-Id: I8b6b9685691e1335b895a12c35ea14b53ec6260c

Adrien Béraud authored 5 years ago and Sébastien Blin committed 5 years ago

Change-Id: I5622a466d0baccf906e6934b748719b2aa3ec37b

Adrien Béraud authored 5 years ago and Sébastien Blin committed 5 years ago

Change-Id: Ie7d90b5e77d320b53a91a16047a8fe3406591586

Change-Id: Ia4eeeb6c2111934e6dc12fa7f2fe47aaf1034ee8

Mohamed Amine Younes Bouacida authored 5 years ago and Sébastien Blin committed 5 years ago

+ fix uint8_t conversion to jbyte
+ update JavaJNI2CJNI_Load.py to account for java inner classes

Change-Id: I9177a93611e6ef5b164586f70f20112bc8cc6f68
Reviewed-by: Sébastien Blin <sebastien.blin@savoirfairelinux.com>

Change-Id: I28f193813ad72ee5936ef0be7f252c40c3b748ee

Change-Id: Iba0d354c9e712daf9a63e5d1df33e9ff0165b3a4

Change-Id: I4b711b79f6d5cb4b6e2141ea474bc5c4697b9c45

Change-Id: Ia5659f670e4f1164afc1ac1016c9dd7fc187d0f3

Pierre Lespagnol authored 5 years ago and Adrien Béraud committed 5 years ago

Change-Id: Iba619f891d0412ca4abe4e03e4b2a11d5a3b2488

Sébastien Blin authored 5 years ago and Adrien Béraud committed 5 years ago

If two daemons are necessary, "DBUS_SESSION_BUS_ADDRESS=xxx ./dring"
is enough. Or use another session.

Change-Id: I8e8b5db50cf2b372b44e4ae643ee3a6643ca5142

Allows switchInput on the same VideoInput instance on Android

Change-Id: I421a7d6e3f7b87d37a3108483cd280dc03c113cf

- Video settings, and APIs will now use a device id, which will be
  a path on platforms where everything is a file, and a DevicePath
  with a bonus ffmpeg-dshow compliant prefix on Windows.

- The device's friendly name is uniquified, and stored in the
  settings still, but only retrieved/translated for UI.

- MRLs are now constructed with the device id.

Change-Id: I092f08cc2cd31bd78aeec5c774c2cc33d75c1d4e

Ming Rui Zhang authored 5 years ago and Adrien Béraud committed 5 years ago

Change-Id: Ifad1bcc6c6747a448ff3e3d54e8cbfb87dab5be3