-
Notifications
You must be signed in to change notification settings - Fork 2
Usages
mauricelambert edited this page Feb 16, 2023
·
6 revisions
WebScripts
Using the python module:
python3 -m WebScripts
python -m WebScripts
WebScripts --help
WebScripts -h
WebScripts --interface "192.168.1.2" --port 80
WebScripts -i "192.168.1.2" -p 80
WebScripts --config-cfg "config1.ini" "config2.ini" --config-cfg "config3.ini"
WebScripts -c "config1.ini" "config2.ini" -c "config3.ini"
WebScripts --config-json "config1.json" "config2.json" --config-json "config3.json"
WebScripts -j "config1.json" "config2.json" -j "config3.json"
WebScripts --scripts-path "./scripts/1/" "./scripts/2/" --scripts-path "./scripts/3/"
WebScripts -S "./scripts/1/" "./scripts/2/" -S "./scripts/3/"
WebScripts --scripts-config "./config/1/*.json" "./config/2/*.ini" --scripts-config "./config/3/*.json"
WebScripts -S "./config/1/*.json" "./config/2/*.ini" -S "./config/3/*.json"
WebScripts --modules "module1" "module2" --modules "module3"
WebScripts -m "module1" "module2" -m "module3"
WebScripts --modules-path "./modules/1/" "./modules/2/" --modules-path "./modules/3/"
WebScripts -I "./modules/1/" "./modules/2/" -I "./modules/3/"
WebScripts --documentations-path "./doc/1/*.html" "./doc/2/*.txt" --documentations-path "./doc/3/*.html"
WebScripts -D "./doc/1/*.html" "./doc/2/*.txt" -D "./doc/3/*.html"
WebScripts --js-path "./js/1/*.js" "./js/2/*.js" --js-path "./js/3/*.js"
WebScripts -J "./js/1/*.js" "./js/2/*.js" -J "./js/3/*.js"
WebScripts --statics-path "./images/1/*.jpg" "./templates/html/2/*.html" --statics-path "./css/3/*.css"
WebScripts -T "./images/1/*.png" "./templates/html/2/*.html" -T "./pdf/3/*.pdf"
WebScripts --active-auth
WebScripts -a
WebScripts --auth-script "auth.py"
WebScripts --accept-unauthenticated-user --accept-unknow-user
WebScripts --auth-failures-to-blacklist 3
WebScripts -b 3
WebScripts --blacklist-time 30
WebScripts -B 30
WebScripts --exclude-auth-paths "/auth/" "/help/" --exclude-auth-paths "/contacts/"
WebScripts --e-auth-paths "/auth/" "/help/" --e-auth-paths "/contacts/"
WebScripts --exclude-auth-pages "/auth/page.py" "/help/page.html" --exclude-auth-pages "/contacts/page.html"
WebScripts --e-auth-pages "/auth/page.py" "/help/page.html" --e-auth-pages "/contacts/page.html"
- To get python error message and traceback on page 500.
- To get the existing URLs on page 404.
- To export the full (since version 3.0.0) server configuration to a JSON file named export_Configuration.json.
- Active unsecure module to see and change configurations
WebScripts --debug
WebScripts -d
- Do not use HTTP security headers, useful for debugging web scripts (javascript)
- Active the Content-Security-Policy-Report-Only header
- Active the debug module for Content-Security-Policy (URL: "/csp/debug/")
- Don't raise
WebScripts.Errors.WebScriptsSecurityError: Logs configuration file/directory permissions are insecure. Remote code execution can be exploited.
. This error is raised when the WebScripts Server is not hardened (file permissions on the log configuration file), be careful it's a security problem (it can be used to bypass hardening in development environment only).
WebScripts --security
WebScripts -s
- Configure the root logger (other loggers are not impacted)
- Level must be in
0
,DEBUG
,INFO
,WARNING
,ERROR
,CRITICAL
WebScripts --log-level DEBUG
WebScripts -l DEBUG
- Configure the root logger (other loggers are not impacted)
WebScripts --log-filename "logs.log"
WebScripts -f "logs.log"
- Configure the root logger (other loggers are not impacted)
WebScripts --log-encoding "utf-8"
- Configure the root logger (other loggers are not impacted)
WebScripts --log-format "%(asctime)s %(levelname)s %(message)s (%(funcName)s -> %(filename)s:%(lineno)d)"
- Configure the root logger (other loggers are not impacted)
WebScripts --log-date-format "%d/%m/%Y %H:%M:%S"
- Configure the SMTP server name to send email notifications
WebScripts --smtp-server "my.smtp.server"
WebScripts --s-server "my.smtp.server"
- Configure the secure connection with StartTLS
WebScripts --smtp-starttls
WebScripts --s-tls
- Configure the SMTP login (username is the
notification_address
configuration), if password is None the WebScripts Server send the email notifications without authentication.
WebScripts --smtp-password "password"
WebScripts --s-password "password"
- Configure the SMTP server port
WebScripts --smtp-port 25
WebScripts --s-port 25
- Configure the secure connection with SSL
WebScripts --smtp-ssl
WebScripts --s-ssl
- Configure the receivers email addresses (should be the administrators addresses)
WebScripts --admin-adresses "admin1@my.smtp.server" "admin2@my.smtp.server" --admin-adresses "admin3@my.smtp.server"
WebScripts --a-adr "admin1@my.smtp.server" "admin2@my.smtp.server" --a-adr "admin3@my.smtp.server"
- Configure the sender email address
WebScripts --notification-address "notification@my.smtp.server"
WebScripts --n-adr "notification@my.smtp.server"
Licensed under the GPL, version 3.