Repository navigation
Improve FTP/FTPS/SFTP configuration and access controls #232
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
Merged
Changes from all commits
Commits
Show all changes
64 commits
Select commit
Hold shift + click to select a range
ffa4f02
Use requested FTP defaults
erikraft 95d42bf
Align FTP service defaults with settings
erikraft b2a3b36
Use requested SFTP credentials by default
erikraft fee040e
Align SFTP service credential defaults
erikraft 98b4c5a
Show FTP connection QR code when starting server
erikraft 848ad8f
Show SFTP connection QR code when starting server
erikraft b7cd0f2
Size connection QR codes for phone screens
erikraft eb50ed3
Size connection QR codes for phone screens
erikraft 19d0c77
Enforce FTP read-only mode and configure FTPS explicit or implicit TLS
erikraft fac4e74
Enforce read-only mode at the SFTP filesystem accessor
erikraft 8e231e9
Add FTPS mode selection, read-only setting and explicit network status
erikraft 75c0cd0
Expose SFTP read-only option and Wi-Fi/IP status
erikraft 48c5c16
Add strings for FTPS modes, read-only and network status
erikraft ce54e2c
Validate selected storage permissions and folder compatibility
erikraft 0b8e906
Validate selected storage permissions and folder compatibility
erikraft 6f1ebaf
Fix escaped newlines in FTP/SFTP settings Java
erikraft d0d6664
Fix escaped newlines in FTP/SFTP settings Java
erikraft 6e44e68
Translate FTP/FTPS/SFTP configuration labels across locales
erikraft 13a2e62
Render Wi-Fi status on separate lines in SFTP settings
erikraft 8614774
fix(ftp): use supported authorities for read-only mode
erikraft 4485f65
chore(android): bump version to 10.1.10
erikraft 6bb5da5
test(android): assert version 10.1.10 code 33
erikraft f4bb29f
Add theme-adaptive ErikrafT Wi-Fi icon
erikraft 35ef875
Add ErikrafT Wi-Fi About section strings
erikraft ac6c768
Add beta badge and ErikrafT Wi-Fi section to About
erikraft a36bb5c
Add localized ErikrafT Wi-Fi About strings (af-rZA)
erikraft 0d3d729
Add localized ErikrafT Wi-Fi About strings (ar-rSA)
erikraft 0ee1a95
Add localized ErikrafT Wi-Fi About strings (bg-rBG)
erikraft c9b076b
Add localized ErikrafT Wi-Fi About strings (ca-rES)
erikraft 9b2bee8
Add localized ErikrafT Wi-Fi About strings (cs-rCZ)
erikraft 2ef1bab
Add localized ErikrafT Wi-Fi About strings (da-rDK)
erikraft 1620509
Add localized ErikrafT Wi-Fi About strings (de-rDE)
erikraft 412ddc5
Add localized ErikrafT Wi-Fi About strings (el-rGR)
erikraft 7d5c499
Add localized ErikrafT Wi-Fi About strings (es-rES)
erikraft 19a50a1
Add localized ErikrafT Wi-Fi About strings (fi-rFI)
erikraft 76c8aee
Add localized ErikrafT Wi-Fi About strings (fr-rFR)
erikraft 239b5ab
Add localized ErikrafT Wi-Fi About strings (hi-rIN)
erikraft 46bc3d8
Add localized ErikrafT Wi-Fi About strings (hr-rHR)
erikraft e75c66f
Add localized ErikrafT Wi-Fi About strings (hu-rHU)
erikraft c7ddb48
Add localized ErikrafT Wi-Fi About strings (in-rID)
erikraft 45d39cc
Add localized ErikrafT Wi-Fi About strings (it-rIT)
erikraft c6c7846
Add localized ErikrafT Wi-Fi About strings (iw-rIL)
erikraft b8ef98f
Add localized ErikrafT Wi-Fi About strings (ja-rJP)
erikraft 33b6d89
Add localized ErikrafT Wi-Fi About strings (ko-rKR)
erikraft b7c5350
Add localized ErikrafT Wi-Fi About strings (mk-rMK)
erikraft 56ea899
Add localized ErikrafT Wi-Fi About strings (ne-rNP)
erikraft 33a8778
Add localized ErikrafT Wi-Fi About strings (nl-rNL)
erikraft 53d8863
Add localized ErikrafT Wi-Fi About strings (no-rNO)
erikraft 2e7d494
Add localized ErikrafT Wi-Fi About strings (pl-rPL)
erikraft 5f8d176
Add localized ErikrafT Wi-Fi About strings (pt-rBR)
erikraft 734c42e
Add localized ErikrafT Wi-Fi About strings (pt-rPT)
erikraft 7a3a41e
Add localized ErikrafT Wi-Fi About strings (ro-rRO)
erikraft 8865612
Add localized ErikrafT Wi-Fi About strings (ru-rRU)
erikraft 5bd18f1
Add localized ErikrafT Wi-Fi About strings (sk-rSK)
erikraft b08e512
Add localized ErikrafT Wi-Fi About strings (sl-rSI)
erikraft 2788c06
Add localized ErikrafT Wi-Fi About strings (sr-rRS)
erikraft 900cb28
Add localized ErikrafT Wi-Fi About strings (sr-rSP)
erikraft 9009075
Add localized ErikrafT Wi-Fi About strings (sr)
erikraft 25f3d86
Add localized ErikrafT Wi-Fi About strings (sv-rSE)
erikraft 2f771d0
Add localized ErikrafT Wi-Fi About strings (tr-rTR)
erikraft c28454e
Add localized ErikrafT Wi-Fi About strings (uk-rUA)
erikraft 3b8beff
Add localized ErikrafT Wi-Fi About strings (vi-rVN)
erikraft c3164b0
Add localized ErikrafT Wi-Fi About strings (zh-rCN)
erikraft 12049f8
Add localized ErikrafT Wi-Fi About strings (zh-rTW)
erikraft File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🟠 Insecure FTP/FTPS/SFTP default configuration: guessable "android"/"android" credentials and TLS disabled by default expose device storage on the local network
Severity: HIGH · CWE-798
PR #232 changes the default FTP/FTPS/SFTP credentials from
admin/erikraftto trivially guessableandroid/android, and flips the FTPS (TLS) default fromtruetofalse. Because the FTP and SFTP servers bind to all local interfaces, default to writable access (readOnly=false), and serve a directory of the device's storage, any device on the same local network can authenticate with the well-knownandroid/androidcredential and read or write the exposed directory. For FTP the credential and all transferred data are now transmitted in cleartext. This is a security regression versus the prior defaults.Prompt to fix with AI
React 👍 / 👎 to tune Strix for this repo. A repo collaborator (or the PR author) can resolve this thread to dismiss the finding.