-(***pre-alpha & experimental, not well tested or easy to use yet***)
+
+
+
+
+
+
+
+
+
+| | | |
+| ----------- | ----------- | ----------- |
+| [Install](#install-and-run-on-linux) | [Features](#main-features) | [Screenshots](#screenshots)|
+| [Docs](#documentation) | [Get involved](#help-out) | [Onionr.net](https://onionr.net/)/[.onion](http://onionr.onionkvc5ibm37bmxwr56bdxcdnb6w3wm4bdghh5qo6f6za7gn7styid.onion/) |
-[![Open Source Love](https://badges.frapsoft.com/os/v3/open-source.png?v=103)](https://github.com/ellerbrock/open-source-badges/)
- - [Onionr.net](https://onionr.net/) - [.onion](http://onionr.onionkvc5ibm37bmxwr56bdxcdnb6w3wm4bdghh5qo6f6za7gn7styid.onion/)
**The main repository for this software is at https://GitLab.com/beardog/Onionr/**
-**The Github page is a mirror, do not submit PRs or issues there.**
+**The [Github repository](https://github.com/beardog108/onionr/) is a mirror, do not submit PRs or issues there.**
# About
@@ -42,8 +52,6 @@ The whitepaper (subject to change prior to alpha release) is available [here](do
* [X] 🕵️ Metadata analysis resistance and anonymity
* [X] 📡 Transport agnosticism (no internet required)
-## Software Suite
-
Onionr ships with various application plugins ready for use out of the box:
Currently usable:
@@ -133,7 +141,9 @@ Email: beardog [ at ] mailbox.org
Onionr Mail: TRH763JURNY47QPBTTQ4LLPYCYQK6Q5YA33R6GANKZK5C5DKCIGQ
-## Disclaimers and legal
+# Security
+
+Onionr is pre-alpha. This means it is unstable, probably insecure, and experimental.
No matter how good Onionr and other software gets, there will always be ways for clever or well-funded adversaries to break your security.
@@ -149,8 +159,6 @@ The Tor Project and I2P developers do not own, create, or endorse this project,
Tor is a trademark for the Tor Project. We do not own it.
-The 'open source badge' is by Maik Ellerbrock and is licensed under a Creative Commons Attribution 4.0 International License.
-
## Onionr Logo
The Onionr logo was created by [Anhar Ismail](https://github.com/anharismail) under the [Creative Commons Attribution 4.0 International License](https://creativecommons.org/licenses/by/4.0/).
diff --git a/onionr/httpapi/security/client.py b/onionr/httpapi/security/client.py
index 73a4af58..b6e4e1f9 100644
--- a/onionr/httpapi/security/client.py
+++ b/onionr/httpapi/security/client.py
@@ -63,5 +63,5 @@ class ClientAPISecurity:
if request.endpoint == 'siteapi.site':
resp.headers['Content-Security-Policy'] = "default-src 'none'; style-src data: 'unsafe-inline'; img-src data:"
else:
- resp.headers['Content-Security-Policy'] = "default-src 'none'; script-src 'self'; object-src 'none'; style-src 'self'; img-src 'self'; media-src 'none'; frame-src 'none'; font-src 'none'; connect-src 'self'"
+ resp.headers['Content-Security-Policy'] = "default-src 'none'; script-src 'self'; object-src 'none'; style-src 'self'; img-src 'self'; media-src 'none'; frame-src 'none'; font-src 'self'; connect-src 'self'"
return resp
\ No newline at end of file
diff --git a/onionr/onionrcommands/resetplugins.py b/onionr/onionrcommands/resetplugins.py
index f6c38f4c..b1ca4603 100644
--- a/onionr/onionrcommands/resetplugins.py
+++ b/onionr/onionrcommands/resetplugins.py
@@ -33,3 +33,5 @@ def reset():
setup_default_plugins()
logger.info('Default plugins have been reset.', terminal=True)
+
+reset.onionr_help = "reinstalls default Onionr plugins (e.g. mail). Should be done after git pulls or plugin modification."
\ No newline at end of file
diff --git a/onionr/static-data/www/board/board.js b/onionr/static-data/www/board/board.js
index 7b018454..dd9f887f 100755
--- a/onionr/static-data/www/board/board.js
+++ b/onionr/static-data/www/board/board.js
@@ -94,7 +94,7 @@ newPostForm.onsubmit = function(){
var message = document.getElementById('newMsgText').value
var channel = document.getElementById('feedIDInput').value
var meta = {'ch': channel}
- var postData = {'message': message, 'type': 'brd', 'encrypt': false, 'meta': JSON.stringify(meta)}
+ var postData = {'message': message, 'sign': false, 'type': 'brd', 'encrypt': false, 'meta': JSON.stringify(meta)}
postData = JSON.stringify(postData)
newPostForm.style.display = 'none'
fetch('/insertblock', {
diff --git a/onionr/static-data/www/board/index.html b/onionr/static-data/www/board/index.html
index c3e8011e..11e0dce4 100755
--- a/onionr/static-data/www/board/index.html
+++ b/onionr/static-data/www/board/index.html
@@ -113,6 +113,11 @@
+