Gauthier 620135aeac fix: resolve a vulnerability with admin token (#1345) ...

By default, the jellyfinAuthToken of every user was always retrieved from the database, and
sometimes sent back to the client. Any logged-in user could retrieve this token via a request
containing admin user information, and use it to gain full access to Jellyfin. This PR removes the
auth token and the device ID from the fields selected by default by TypeORM.

2025-02-10 00:17:11 +01:00

..

api

feat(api): make rottentomatoes matching more robust (#1265)

2025-01-31 23:04:34 +08:00

constants

fix(jellyfinlogin): add proper error message when no admin user exists (#1216)

2025-01-02 16:03:45 +01:00

entity

fix: resolve a vulnerability with admin token (#1345)

2025-02-10 00:17:11 +01:00

interfaces/api

feat: add a setting for special episodes (#1193)

2024-12-30 05:03:49 +08:00

job

fix(jobs): run plex/jellyfin jobs only for the relevant media server (#1331)

2025-02-05 05:01:02 +08:00

lib

feat(settings): add settings for custom DNS servers and IPv4 resolution first (#1266)

2025-01-16 10:46:27 +01:00

middleware

perf(imageproxy): do not set cookies to image proxy so CDNs can cache images (#3332)

2023-02-12 20:05:29 +09:00

migration

feat: override rules (#945)

2024-12-29 05:20:35 +08:00

models

feat: Option on item's page to add/remove from watchlist (#781)

2024-08-07 13:46:57 +02:00

repositories

feat(add watchlist): adding midding functionality from overserr

2023-04-27 22:27:23 +07:00

routes

fix: resolve a vulnerability with admin token (#1345)

2025-02-10 00:17:11 +01:00

scripts

feat: view other users' watchlists (#2959)

2022-08-22 05:50:27 +00:00

subscriber

fix: issues with issues (#3267)

2023-01-24 02:58:56 +00:00

templates/email

feat(notif): issue notifications (#2242)

2021-12-04 21:24:26 +09:00

types

fix(logging): handle media server connection refused error/toast (#748)

2024-05-23 19:34:31 +05:00

utils

feat(settings): add settings for custom DNS servers and IPv4 resolution first (#1266)

2025-01-16 10:46:27 +01:00

datasource.ts

refactor(postgres): add postgres socket (#1248)

2025-01-12 22:40:46 +08:00

index.ts

feat(settings): add settings for custom DNS servers and IPv4 resolution first (#1266)

2025-01-16 10:46:27 +01:00

logger.ts

fix: log level value should not be case sensitive (#2913)

2022-08-17 01:33:13 +09:00

tsconfig.json

refactor: update Next.js, React.js and Node.js (#815)

2024-06-23 23:43:54 +02:00