jellyfin/Jellyfin.Api
Erwin de Haan f61d18612b Fix directory traversal in the HlsSegmentController in a fairly rudimentary but working way.
GHSL-2021-050: Issue 1,2,3 Arbitrary file read and directory traversal.
The segment id's can probably just be verified to be an actual ID or to not contain any forward or backward slashes
2021-03-20 01:14:59 +01:00
..
Attributes Add image file accept to openapi 2021-02-10 16:12:52 -07:00
Auth Minor code style related change 2020-12-07 16:15:56 +01:00
Constants Update authorization policies for SyncPlay 2020-12-07 10:33:15 +01:00
Controllers Fix directory traversal in the HlsSegmentController in a fairly rudimentary but working way. 2021-03-20 01:14:59 +01:00
Extensions Minor improvements 2021-02-21 02:49:52 +01:00
Helpers Merge pull request #5403 from BaronGreenback/DLNAProfileFix 2021-03-10 11:50:08 +01:00
ModelBinders Change log level for converters 2021-01-01 09:34:39 -07:00
Models Fix third part integration 2021-03-11 22:45:58 -07:00
WebSocketListeners Remove circular dependency between websocket listeners and manager 2020-11-28 11:21:53 +01:00
BaseJellyfinApiController.cs Move json profiles to constant strings. 2020-09-03 12:15:24 -06:00
Jellyfin.Api.csproj FxCop -> Net Analyzers (part 1) 2021-03-09 03:04:47 +01:00