Commit graph

20235 commits

Author SHA1 Message Date
Erwin de Haan
1f3aa3fe6f Apply review suggestions 2021-03-20 01:28:14 +01:00
Erwin de Haan
470305f75e Authenticated arbitrary file overwrite in SubtitleController -> SubtitleManager
GHSL-2021-050: Issue 5 Arbitrary file overwrite.
2021-03-20 01:14:59 +01:00
Erwin de Haan
239a7156cc Fix arbitrary image file reads in ImageByNameController
GHSL-2021-050: Issue 4 Arbitrary image file read and directory traversal.
2021-03-20 01:14:59 +01:00
Erwin de Haan
f61d18612b Fix directory traversal in the HlsSegmentController in a fairly rudimentary but working way.
GHSL-2021-050: Issue 1,2,3 Arbitrary file read and directory traversal.
The segment id's can probably just be verified to be an actual ID or to not contain any forward or backward slashes
2021-03-20 01:14:59 +01:00
Claus Vium
9360fecb31
Merge pull request #5559 from cvium/fix-tmdb-search-clean
Clean the entity name for non-words before searching
2021-03-19 09:24:20 +01:00
Claus Vium
e1c6bb0482
Merge pull request #5561 from barronpm/permissions-fix 2021-03-19 09:23:32 +01:00
andrewthemeow
9857c21717 Translated using Weblate (Lithuanian)
Translation: Jellyfin/Jellyfin
Translate-URL: https://translate.jellyfin.org/projects/jellyfin/jellyfin-core/lt/
2021-03-19 02:50:08 -04:00
Patrick Barron
85da0b50e2 Fix user mocking 2021-03-17 21:24:14 -04:00
Patrick Barron
12b8e29aef Fix duplicate permissions 2021-03-17 17:42:45 -04:00
cvium
151156f227 Clean the entity name for non-words before searching 2021-03-17 10:29:45 +01:00
Vitorvlv
37aa3e8735 Translated using Weblate (Portuguese (Brazil))
Translation: Jellyfin/Jellyfin
Translate-URL: https://translate.jellyfin.org/projects/jellyfin/jellyfin-core/pt_BR/
2021-03-16 23:19:43 -04:00
Alyssa Ross
e14311ca8b Translated using Weblate (Esperanto)
Translation: Jellyfin/Jellyfin
Translate-URL: https://translate.jellyfin.org/projects/jellyfin/jellyfin-core/eo/
2021-03-16 15:19:34 -04:00
Bond-009
f42cee4790
Merge pull request #5550 from cvium/revert_underscore_multiversion 2021-03-16 14:38:29 +01:00
cvium
23c3188501 revert underscore as a multiversion separator 2021-03-15 23:24:59 +01:00
Claus Vium
94820f569b
Merge pull request #5512 from crobibero/api-spec-version 2021-03-15 18:01:20 +01:00
Claus Vium
baa43c6b41
Merge pull request #5475 from BaronGreenback/SSDPFix 2021-03-15 09:06:15 +01:00
Bond-009
f2125da9f9
Merge pull request #5395 from barronpm/ef-cleanup 2021-03-14 19:08:50 +01:00
Patrick Barron
e5380c653b Merge branch 'master' into ef-cleanup
# Conflicts:
#	Jellyfin.Data/Entities/Libraries/MediaFileStream.cs
#	Jellyfin.Data/Jellyfin.Data.csproj
2021-03-14 10:19:35 -04:00
Claus Vium
109f24514f
Merge pull request #5510 from BaronGreenback/DlnaFirstFix
Fix: Streaming crashing due to no deviceProfileId match.
2021-03-14 15:07:31 +01:00
Claus Vium
bd70f56218
Merge pull request #5324 from danieladov/master
Fix duplicated movies when group movies into collections is enabled
2021-03-14 13:37:00 +01:00
Bond-009
0e5d4a3bcf
Merge pull request #5422 from Bond-009/warn51 2021-03-14 00:41:40 +01:00
Bond-009
5c0c205bed
Merge pull request #5522 from Bond-009/integrationtests
Fix integration test project
2021-03-14 00:21:51 +01:00
Bond_009
72d3eed15c Fix integration test project 2021-03-14 01:07:53 +01:00
Bond-009
8bb2420a25
Merge pull request #5518 from crobibero/missing-endpoints
Add missing InstantMix endpoints
2021-03-13 22:59:47 +01:00
Bond_009
01dfa8801a Fix GetDaysOfWeek behavior 2021-03-13 22:40:23 +01:00
Bond_009
46a41ecba6 Sunday isn't a weekend 2021-03-13 22:33:28 +01:00
Bond_009
a8ed753f6c FxCop -> Net Analyzers (part 2) 2021-03-13 22:33:28 +01:00
Mister Rajoy
8883aa4a37 Merge branch 'master' of https://github.com/danieladov/jellyfin 2021-03-13 20:35:52 +01:00
Mister Rajoy
4cc3b938fa Change Guid.Parse to Guid.TryParse 2021-03-13 20:33:05 +01:00
Daniel
7a3109104b
Remove empty line
Co-authored-by: Cody Robibero <cody@robibe.ro>
2021-03-13 19:24:02 +01:00
Daniel
4b17648df3
Remove empty line
Co-authored-by: Cody Robibero <cody@robibe.ro>
2021-03-13 19:23:52 +01:00
crobibero
9ac9543ee2 Add missing InstantMix endpoints 2021-03-13 09:09:22 -07:00
crobibero
1169a0214b Set default version 2021-03-13 08:43:14 -07:00
Bond-009
260b48ef9d
Merge pull request #5515 from jellyfin/fix-refresh-endpoint
fix refresh endpoint
2021-03-13 15:07:42 +01:00
Bond-009
b755c25217
Merge pull request #5220 from Bond-009/hdhomerun 2021-03-13 15:05:18 +01:00
Bond-009
7a988ef77d
Merge pull request #5500 from crobibero/api-integration-fix
Fix third party integration
2021-03-13 15:03:06 +01:00
Claus Vium
fe2a310fe2
fix refresh endpoint
It was originally a POST 9af6eda0b4/MediaBrowser.Api/Library/LibraryService.cs (L155)
2021-03-13 09:13:45 +01:00
crobibero
500832bdfd Set openapi version to server version 2021-03-12 17:11:43 -07:00
BaronGreenback
1d5b7b61fb Change First to FirstOrDefault 2021-03-12 22:20:13 +00:00
WWWesten
80846a1c66 Translated using Weblate (Kazakh)
Translation: Jellyfin/Jellyfin
Translate-URL: https://translate.jellyfin.org/projects/jellyfin/jellyfin-core/kk/
2021-03-12 08:21:06 -05:00
Bond-009
a037e30b41
Merge pull request #5457 from cvium/fix_double_artist 2021-03-12 13:18:12 +01:00
crobibero
eef15dc7ac Fix third part integration 2021-03-11 22:45:58 -07:00
Bond-009
d7f0aaaec1
Merge pull request #5417 from Bond-009/codeanal
Add code analysis attributes where appropriate
2021-03-12 00:15:12 +01:00
Bond-009
e3adc9ab74
Merge pull request #5480 from crobibero/api-session-message-type
Add SessionMessageType to generated openapi spec
2021-03-11 22:35:33 +01:00
Bond-009
d967267cef
Merge pull request #5461 from cvium/fix_multiversion 2021-03-11 22:31:06 +01:00
Anthony Lavado
227eaca99c
Merge pull request #5490 from thornbill/remove-forum-badge 2021-03-11 10:45:06 -05:00
Bill Thornton
e6407b414b Remove forum badge 2021-03-11 09:34:10 -05:00
crobibero
8e09276d7d Add websocket session message type to generated openapi.json 2021-03-10 16:33:46 -07:00
BaronGreenback
1723ed1604 removed the space AGAIN!!! 2021-03-10 19:59:58 +00:00
BaronGreenback
5db998e135 removed space. 2021-03-10 19:59:18 +00:00