alberanid / diffido Goto Github PK

In many cases it's possible to send emails to notify the admin that something horrible happened.

Email can contain more info, like the monitored URL.

Also, consider attaching the diff (instead of putting it in the body)

When hundreds of lines have changed, the diff page is so slow you want to hurt yourself again. Let's see what can be done to improve the performances.

The html2diff library also supports a side-by-side view of the diff; let's do it!

Mobile GUI needs a lot of improvements: both the main table and the "schedule" page are difficult to use.

We should support authentication (Basic/Digest HTTP access authentication and based on sessions), custom cookies and other HTTP methods (POST/PUT)

Add support for https://github.com/Lukasa/requests-ftp

For some still undetected reasons, sometimes a new storage directory is not created.
In this case, the whole daemon is blocked:

Process Process-37:
Traceback (most recent call last):
  File "/usr/lib/python3.6/multiprocessing/process.py", line 258, in _bootstrap
    self.run()
  File "/usr/lib/python3.6/multiprocessing/process.py", line 93, in run
    self._target(*self._args, **self._kwargs)
  File "./diffido.py", line 199, in _commit
    os.chdir('storage/%s' % id_)
FileNotFoundError: [Errno 2] No such file or directory: 'storage/5'
Process Process-37:
Traceback (most recent call last):
  File "/usr/lib/python3.6/multiprocessing/process.py", line 258, in _bootstrap
    self.run()
  File "/usr/lib/python3.6/multiprocessing/process.py", line 93, in run
    self._target(*self._args, **self._kwargs)
  File "./diffido.py", line 199, in _commit
    os.chdir('storage/%s' % id_)
FileNotFoundError: [Errno 2] No such file or directory: 'storage/5'

Introduce a modal to ask confirm, deleting an entry.

Add a column to the index table with the time of the last detected change

We should introduce support to username:password login to SMTP servers.

It's probably just a matter of:

• add two command line options (smtp_username and smtp_password) to get username and password (and also add them to the diffido.conf sample)
• add s.login before both the s.send_message lines (notice that there are 2 calls, there) in the send_email function, if the above options are set

The history page, especially, will become quickly not usable.

Waiting for upstream support: https://vuematerial.io/components/table

It should be possible to display also the page at a given revision, in the diff page.

Editing a trigger, numeric fields expand over other elements, when focused.

It happens only on Firefox, they are ok with Chrome. Maybe we can update our version of https://vuematerial.io/

The "show entries with no changes" filter of the diff page is currently client-side: it must be moved on the server.

Introduce the ability to customize the email template.

Update Axios package due to a security alert.

CVE-2020-28168
high severity
Vulnerable versions: < 0.21.1
Patched version: 0.21.1

Axios NPM package 0.21.0 contains a Server-Side Request Forgery (SSRF) vulnerability where an attacker is able to bypass a proxy by providing a URL that responds with a redirect to a restricted host or IP address.