Changelog: https://github.com/LimeSurvey/LimeSurvey/blob/6.1.2%2B230606/docs/release_notes.txt This upgrade contains security fixes: * XSS issue in notification email address * Issue in CSV user export * Removed vulnerable example files * Administrator can change his own password without entering the existing one * Unsafe way to detect IP address against brute-force attacks
42 lines
937 B
Nix
42 lines
937 B
Nix
{ lib, stdenv, fetchFromGitHub, writeText, nixosTests }:
|
|
|
|
stdenv.mkDerivation rec {
|
|
pname = "limesurvey";
|
|
version = "6.1.2+230606";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "LimeSurvey";
|
|
repo = "LimeSurvey";
|
|
rev = version;
|
|
hash = "sha256-a89Kdr9XV1TSCoWxYrU0j8ec7rAcIlU/bgLtRjdzqbg=";
|
|
};
|
|
|
|
phpConfig = writeText "config.php" ''
|
|
<?php
|
|
return require(getenv('LIMESURVEY_CONFIG'));
|
|
?>
|
|
'';
|
|
|
|
installPhase = ''
|
|
runHook preInstall
|
|
|
|
mkdir -p $out/share/limesurvey
|
|
cp -r . $out/share/limesurvey
|
|
cp ${phpConfig} $out/share/limesurvey/application/config/config.php
|
|
|
|
runHook postInstall
|
|
'';
|
|
|
|
passthru.tests = {
|
|
smoke-test = nixosTests.limesurvey;
|
|
};
|
|
|
|
meta = with lib; {
|
|
description = "Open source survey application";
|
|
license = licenses.gpl2;
|
|
homepage = "https://www.limesurvey.org";
|
|
maintainers = with maintainers; [offline];
|
|
platforms = with platforms; unix;
|
|
};
|
|
}
|