Added check for preventing ntopng from starting when no network interface is available
Removed un-needed cal-heatmap.source-map.js file
Fixed some spelling issues
Fixed host_details.lua with localhosts
Removed old JSs no longer present
Minor optimizations



git-svn-id: https://svn.ntop.org/svn/ntop/trunk/ntopng@8131 a02cd0c1-8e76-42e1-a119-56f9641475e2
Reworked #define


git-svn-id: https://svn.ntop.org/svn/ntop/trunk/ntopng@8133 a02cd0c1-8e76-42e1-a119-56f9641475e2
Added -lrt check


git-svn-id: https://svn.ntop.org/svn/ntop/trunk/ntopng@8134 a02cd0c1-8e76-42e1-a119-56f9641475e2
Reworked library dendencies
GeoIP dat files are no longer installed during "make install" but "make geoip" must be performed priod to install ntopng



git-svn-id: https://svn.ntop.org/svn/ntop/trunk/ntopng@8135 a02cd0c1-8e76-42e1-a119-56f9641475e2
Fixed top peers in case of vlans traffic and minor changes


git-svn-id: https://svn.ntop.org/svn/ntop/trunk/ntopng@8136 a02cd0c1-8e76-42e1-a119-56f9641475e2
Minor changes


git-svn-id: https://svn.ntop.org/svn/ntop/trunk/ntopng@8137 a02cd0c1-8e76-42e1-a119-56f9641475e2
Added alternate search path at the startup dir to fix a bug introduced during Debian packaging


git-svn-id: https://svn.ntop.org/svn/ntop/trunk/ntopng@8144 a02cd0c1-8e76-42e1-a119-56f9641475e2
Fixed "Applications" menu content


git-svn-id: https://svn.ntop.org/svn/ntop/trunk/ntopng@8147 a02cd0c1-8e76-42e1-a119-56f9641475e2
centos 7 package fix

git-svn-id: https://svn.ntop.org/svn/ntop/trunk/ntopng@8148 a02cd0c1-8e76-42e1-a119-56f9641475e2
Added check on host names to prevent XSS in ntopng


git-svn-id: https://svn.ntop.org/svn/ntop/trunk/ntopng@8149 a02cd0c1-8e76-42e1-a119-56f9641475e2
added /usr/local/bin/ntopng link on centos package

git-svn-id: https://svn.ntop.org/svn/ntop/trunk/ntopng@8151 a02cd0c1-8e76-42e1-a119-56f9641475e2
Various fixes to prevent security attacks
- Local file inclusion now checks paths (globbing) even for authenticated users
- Added check for CRSF attacks (http://en.wikipedia.org/wiki/Cross-site_request_forgery)
- Added extra checks for preventing XSS (http://en.wikipedia.org/wiki/Cross-site_scripting)
- Fix for Set-Cookie HttpOnly
- Added X­Frame­Options: DENY in http headers to prevent clickjacking attacks
- Specified charset ISO­8859­1 in HTML resposes to avoid attackers to bypass application's defensive filters

We thank Luca Carettoni @_ikki for his work on inspecting ntopng security

When ntopng starts the admin user is created alogn with full name and group (previously unset)



git-svn-id: https://svn.ntop.org/svn/ntop/trunk/ntopng@8153 a02cd0c1-8e76-42e1-a119-56f9641475e2
Fixed path


git-svn-id: https://svn.ntop.org/svn/ntop/trunk/ntopng@8154 a02cd0c1-8e76-42e1-a119-56f9641475e2
Updated to the latest rickshaw


git-svn-id: https://svn.ntop.org/svn/ntop/trunk/ntopng@8155 a02cd0c1-8e76-42e1-a119-56f9641475e2
Further fixes to harden code against HTTP attacks


git-svn-id: https://svn.ntop.org/svn/ntop/trunk/ntopng@8157 a02cd0c1-8e76-42e1-a119-56f9641475e2
OpenBSD fixes courtesy of Destan YILANCI


git-svn-id: https://svn.ntop.org/svn/ntop/trunk/ntopng@8182 a02cd0c1-8e76-42e1-a119-56f9641475e2
Minor fix


git-svn-id: https://svn.ntop.org/svn/ntop/trunk/ntopng@8183 a02cd0c1-8e76-42e1-a119-56f9641475e2
Fixed L7_PROTO value when exporting flows in json


git-svn-id: https://svn.ntop.org/svn/ntop/trunk/ntopng@8184 a02cd0c1-8e76-42e1-a119-56f9641475e2
Fix for CSRF attacks

Fixes for
CVE-2014-5464 - Steffen Bauch
CVE-2014-4329 - Madhu Akula
CVE-2014-5511, CVE-2014-5512, CVE-2014-5513, CVE-2014-5514, CVE-2014-5515 - Luca Carettoni



git-svn-id: https://svn.ntop.org/svn/ntop/trunk/ntopng@8185 a02cd0c1-8e76-42e1-a119-56f9641475e2