[enh] display warning and instruction to fix meltdown/spectre vulnerabilities

This commit is contained in:
Laurent Peuch 2018-01-05 16:05:54 +01:00
parent 2d1678a468
commit ec4172a2d3
2 changed files with 7 additions and 0 deletions

View file

@ -71,6 +71,12 @@
c.flash('fail', y18n.t('error_retrieve_feed', [securityFeed])); c.flash('fail', y18n.t('error_retrieve_feed', [securityFeed]));
}); });
c.api("/meltdown-spectre-check", function(data) {
if (!data.safe) {
c.flash('danger', y18n.t('meltdown_spectre'));
}
});
c.view('home'); c.view('home');
}); });
}); });

View file

@ -343,6 +343,7 @@
"install_letsencrypt_cert" : "Install a Let's Encrypt certificate", "install_letsencrypt_cert" : "Install a Let's Encrypt certificate",
"manually_renew_letsencrypt_message" : "Certificate will be automatically renewed during the last 15 days of validity. You can manually renew it if you want to. (Not recommended).", "manually_renew_letsencrypt_message" : "Certificate will be automatically renewed during the last 15 days of validity. You can manually renew it if you want to. (Not recommended).",
"manually_renew_letsencrypt" : "Manually renew now", "manually_renew_letsencrypt" : "Manually renew now",
"meltdown_spectre" : "You are vulnerable to the <a target=\"_blank\" href=\"https://meltdownattack.com/\">spectre and meltdown</a> critical security vulnerabilities. To fix that, you need to <a href=\"#/update\">update your system</a> then <a href=\"#/tools/reboot\">reboot it</a> to load the new linux kernel.",
"regenerate_selfsigned_cert_message" : "If you want, you can regenerate the self-signed certificate.", "regenerate_selfsigned_cert_message" : "If you want, you can regenerate the self-signed certificate.",
"regenerate_selfsigned_cert" : "Regenerate self-signed certificate", "regenerate_selfsigned_cert" : "Regenerate self-signed certificate",
"revert_to_selfsigned_cert_message" : "If you really want to, you can reinstall a self-signed certificate. (Not recommended)", "revert_to_selfsigned_cert_message" : "If you really want to, you can reinstall a self-signed certificate. (Not recommended)",