Squashed commit of the following:
commit ecf5d51455
Author: Tobias_Groza <tobias.groza@outlook.de>
Date: Fri Feb 9 15:45:56 2018 +0000
Translated using Weblate (German)
Currently translated at 45.3% (180 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/de/
commit 8e88ed041a
Author: Takumi Shoji <azumukupoe1999@gmail.com>
Date: Wed Feb 7 13:31:22 2018 +0000
Added translation using Weblate (Japanese)
commit 1cb941084b
Author: Марс Ямбар <mjambarmeta@gmail.com>
Date: Sun Feb 4 11:31:42 2018 +0000
Translated using Weblate (Ukrainian)
Currently translated at 42.4% (169 of 398 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/uk/
commit 765b98f46f
Author: anonymous <>
Date: Sun Feb 4 09:24:22 2018 +0000
Translated using Weblate (German)
Currently translated at 43.0% (171 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/de/
commit 9cadc4463a
Author: Follpvosten <wolfi@karpador.xyz>
Date: Sun Feb 4 09:24:10 2018 +0000
Translated using Weblate (German)
Currently translated at 42.8% (170 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/de/
commit 50065b4e35
Author: anonymous <>
Date: Sun Feb 4 09:22:12 2018 +0000
Translated using Weblate (German)
Currently translated at 42.5% (169 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/de/
commit 8a752cdd9d
Author: ezjerry liao <ezjerry@gmail.com>
Date: Fri Feb 2 08:56:38 2018 +0000
Translated using Weblate (Chinese (Traditional))
Currently translated at 100.0% (397 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/zh_Hant/
commit dd63360aae
Author: Andreas Kleinert <Andy.Kleinert@gmail.com>
Date: Thu Feb 1 18:53:17 2018 +0000
Translated using Weblate (German)
Currently translated at 41.0% (163 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/de/
commit 51b8b24f54
Author: anonymous <>
Date: Thu Feb 1 18:48:47 2018 +0000
Translated using Weblate (German)
Currently translated at 39.7% (158 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/de/
commit 41c9716d20
Author: Andreas Kleinert <Andy.Kleinert@gmail.com>
Date: Thu Feb 1 18:47:31 2018 +0000
Translated using Weblate (German)
Currently translated at 39.5% (157 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/de/
commit 50cc7dba10
Author: anonymous <>
Date: Thu Feb 1 18:45:21 2018 +0000
Translated using Weblate (German)
Currently translated at 39.5% (157 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/de/
commit 4ac4c4d829
Author: Andreas Kleinert <Andy.Kleinert@gmail.com>
Date: Thu Feb 1 18:45:08 2018 +0000
Translated using Weblate (German)
Currently translated at 39.5% (157 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/de/
commit 95fe106077
Author: anonymous <>
Date: Thu Feb 1 18:44:58 2018 +0000
Translated using Weblate (German)
Currently translated at 39.5% (157 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/de/
commit 1b08bc809e
Author: Andreas Kleinert <Andy.Kleinert@gmail.com>
Date: Thu Feb 1 18:44:08 2018 +0000
Translated using Weblate (German)
Currently translated at 39.5% (157 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/de/
commit 96e9647bde
Author: anonymous <>
Date: Thu Feb 1 18:41:24 2018 +0000
Translated using Weblate (German)
Currently translated at 39.5% (157 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/de/
commit fe2b29d432
Author: Andreas Kleinert <Andy.Kleinert@gmail.com>
Date: Thu Feb 1 18:40:49 2018 +0000
Translated using Weblate (German)
Currently translated at 39.5% (157 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/de/
commit 7c7877eded
Author: Luca D'Amico <damico.luca91@live.it>
Date: Mon Jan 29 16:54:49 2018 +0000
Translated using Weblate (Italian)
Currently translated at 36.2% (144 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/it/
commit 51a301b206
Author: anonymous <>
Date: Sun Jan 28 22:10:11 2018 +0000
Translated using Weblate (German)
Currently translated at 39.5% (157 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/de/
commit 8956165544
Author: dadnal <liberapay-weblate@com.beintner.de>
Date: Sun Jan 28 22:09:42 2018 +0000
Translated using Weblate (German)
Currently translated at 39.2% (156 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/de/
commit f9ef03ddc3
Author: anonymous <>
Date: Sun Jan 28 22:09:32 2018 +0000
Translated using Weblate (German)
Currently translated at 39.2% (156 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/de/
commit d26423fb9a
Author: dadnal <liberapay-weblate@com.beintner.de>
Date: Sun Jan 28 22:09:20 2018 +0000
Translated using Weblate (German)
Currently translated at 39.0% (155 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/de/
commit 4b2f03f310
Author: anonymous <>
Date: Sun Jan 28 22:08:41 2018 +0000
Translated using Weblate (German)
Currently translated at 38.7% (154 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/de/
commit c13c602ae6
Author: dadnal <liberapay-weblate@com.beintner.de>
Date: Sun Jan 28 22:08:06 2018 +0000
Translated using Weblate (German)
Currently translated at 38.5% (153 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/de/
commit 195dddd89a
Author: anonymous <>
Date: Sun Jan 28 22:07:22 2018 +0000
Translated using Weblate (German)
Currently translated at 38.5% (153 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/de/
commit e44c705053
Author: dadnal <liberapay-weblate@com.beintner.de>
Date: Sun Jan 28 22:06:51 2018 +0000
Translated using Weblate (German)
Currently translated at 38.2% (152 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/de/
commit 02a6882ea2
Author: anonymous <>
Date: Sun Jan 28 22:05:31 2018 +0000
Translated using Weblate (German)
Currently translated at 37.7% (150 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/de/
commit 68b8c4bc06
Author: dadnal <liberapay-weblate@com.beintner.de>
Date: Sun Jan 28 22:05:17 2018 +0000
Translated using Weblate (German)
Currently translated at 37.5% (149 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/de/
commit 40810ad9f9
Author: Alireza A. A <alir425p@gmail.com>
Date: Thu Jan 18 17:22:49 2018 +0000
Translated using Weblate (Persian)
Currently translated at 0.2% (1 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/fa/
commit f1c8192d0e
Author: ezjerry liao <ezjerry@gmail.com>
Date: Mon Jan 22 09:04:22 2018 +0000
Translated using Weblate (Chinese (Traditional))
Currently translated at 100.0% (397 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/zh_Hant/
commit e92e8664f9
Author: Jeff Huang <s8321414@gmail.com>
Date: Tue Jan 16 02:37:32 2018 +0000
Translated using Weblate (Chinese (Traditional))
Currently translated at 100.0% (397 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/zh_Hant/
commit e09a832dd0
Author: jxt <chihsun.tsai@gmail.com>
Date: Mon Jan 15 00:38:41 2018 +0000
Translated using Weblate (Chinese (Traditional))
Currently translated at 100.0% (397 of 397 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/zh_Hant/
commit b22859288f
Author: monolifed <monolifed@gmail.com>
Date: Sat Jan 6 23:24:19 2018 +0000
Translated using Weblate (Turkish)
Currently translated at 37.4% (149 of 398 strings)
Translation: F-Droid/F-Droid Server
Translate-URL: https://hosted.weblate.org/projects/f-droid/fdroidserver/tr/
git-svn will put up the "Reject/Accept" prompt if it encounters a bad HTTPS
certificate. I could find no way to stop it from doing that. So instead,
this checks the HTTPS connection with an HTTP HEAD request first.
Subversion does not verify each commit as strongly as git does, so HTTPS is
really important. Also, there is the possibility of injecting code into
`fdroid checkupdate` calls if plain HTTP is used.
This uses both the env vars and the command line options to ensure
that it works with as many versions of git as possible. Also, git-svn
uses the env vars, but not necessarily the command line options.
This uses /bin/true to pretend that it succesfully got the password.
If password auth is truly required, then it will fail further on down
the line.
Currently f-droid.org has a lot of pending builds and big delays
between "fdroid build --all" runs. Bump overall build time limit from
12 hours to 36 hours to increase buildserver throughput.
We always want to run all utilities non-interactively. By default
subprocess.Popen() inherits stdin descriptor from parent process, i.e.
when fdroid is run from an interactive shell, subprocesses may expect
input from it.
Reading from /dev/null immediately returns EOF, failing any user prompt
and preventing us from hang.
There are all sorts of unfiltered user inputs like tag and branch names in
source repos. If those names are fed into popen calls that use shell=True,
that opens up a wide range of exploits. All core operations should never
use shell=True.
This is a quick and very incomplete addition of '--' to command line calls
to source VCSs like git and hg that could manipulated by malicious
tag/branch names or other vectors.
These were all manually tested by calling the command lines on my own
machine.
This lets `fdroid scanner my.package.name` run without requiring that the
versionCode is also specified. It also allows scanner.scan_source() to be
called as a function in the public API of fdroidserver.
We should be replacing all our custom git shell commands with python3-git,
since it is a common library for doing that. It will receive a lot more
attention and maintenance than our code for doing it. For example, we
should not ever use shell=True, since that opens up a lot of security
risks.
