Commit Graph
943 Commits
Author SHA1 Message Date
Andrew DeMaria e330eeb864 Remove coverity integration - not working 2019-03-27 20:50:03 -06:00
Andrew DeMaria 4e73266a7f Add travis ci badge 2019-03-27 19:58:55 -06:00
Andrew DeMaria 897de26886 Remove comment 2019-03-27 19:56:13 -06:00
Andrew DeMaria bc0bfdf481 Update scan token
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
2019-03-27 19:14:32 -06:00
Andrew DeMaria fb0079d3c0 Merge remote-tracking branch 'origin/pr/932' 2019-03-27 19:02:25 -06:00
Andrew DeMaria 54e1237320 Exclude new spring 5.0.5 cve 2019-03-27 19:00:14 -06:00
Andrew DeMariaandGitHub 5dc96ba011 Add coverity badge 2019-03-27 18:50:37 -06:00
jvoisin 6f3c3312ee Add coverity scan to travis 2019-03-27 23:43:59 +01:00
Andrew DeMaria 8a1f36c792 Revert change to DWR fixes #923
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
2019-03-26 16:08:54 -06:00
jvoisin 39b9eab715 Simplify a bit the css 2019-03-26 23:08:50 +01:00
jvoisin 0b72acefed Oups 2019-03-26 23:04:32 +01:00
jvoisin fa5ffdc07a Remove the external fonts usage
This is a radical (and simple) solution
to #853, #399, #439, #174 and partially #712.
2019-03-26 21:30:45 +01:00
jvoisinandAndrew DeMaria ab92f83c1f Add a bunch of hardening to the systemd unit
I tested this locally, it's working on my machine™
Nothing fancy, no new privileges, private stuff (/tmp, …),
no exotic devices/access/…, …

Signed-off-by: jvoisin <julien.voisin@dustri.org>
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
2019-03-26 14:27:52 -06:00
Andrew DeMaria e76d44d957 Merge remote-tracking branch 'origin/pr/908' 2019-03-26 13:59:48 -06:00
Andrew DeMaria 9413f1f489 Merge remote-tracking branch 'origin/pr/912' 2019-03-26 13:00:39 -06:00
Andrew DeMaria 8f1d790784 Merge remote-tracking branch 'origin/pr/913' 2019-03-26 13:00:08 -06:00
Andrew DeMaria 00ee8a9662 Merge remote-tracking branch 'origin/pr/915' 2019-03-26 12:59:48 -06:00
Andrew DeMaria a3041a59c7 Merge remote-tracking branch 'origin/pr/916' 2019-03-26 12:59:22 -06:00
jvoisinandAndrew DeMaria 615e317b01 Bump liquibase version
Signed-off-by: jvoisin <julien.voisin@dustri.org>
2019-03-26 12:52:16 -06:00
jvoisinandAndrew DeMaria 919051db9e Simplify the travis file
- Remove `sudo` since it's deprecated,
  along with the useless `apt update` call
- Remove the manual maven installation since
  it's already present on the travis image
  by default

This should reduce a bit the time taken for a whole CI run.
2019-03-26 12:49:01 -06:00
jvoisin 30fa4d0467 Second pass of trivial modernizations
- Replace unnecessary getters/setters with inline assignments
- Simplify string constructions
- Improve containers construction
2019-03-26 00:00:21 +01:00
jvoisin ca489f8220 This is a first batch of simple modernization of the codebase
I threw airsonic at IntelliJ's IDEA analysis,
and asked it to flag what could be modernized
for Java > 5.

- foreach instead of for…
- I added some null-deref checks
- Integer.ValueOf, since Integer(…) is deprecated
- Contextual try
- Objects.equals instead of handcrafted comparisons
- StringBuilder instead of StringBuffer
- Removal of outdated/wrong javadoc comments
2019-03-25 23:33:03 +01:00
jvoisin 45ef973627 Fix a javascript null-deref
This commit should fix the following javascript crash that
may occur if the localstorage isn't available/supported by the browser:

```
more.view:140 Uncaught TypeError: Cannot read property 'playCountValue' of null
    at loadShuffleForm (more.view:140)
    at HTMLDocument.<anonymous> (more.view:181)
    at n (jquery-1.7.1.min.js:2)
    at Object.fireWith (jquery-1.7.1.min.js:2)
    at Function.ready (jquery-1.7.1.min.js:2)
    at HTMLDocument.B (jquery-1.7.1.min.js:2)
```

Signed-off-by: jvoisin <julien.voisin@dustri.org>
2019-03-22 06:10:20 +01:00
jvoisin a9d5f73287 Bump guava version
Signed-off-by: jvoisin <julien.voisin@dustri.org>
2019-03-21 22:32:30 +01:00
jvoisin 0a47c6e461 Bump java-jwt
Signed-off-by: jvoisin <julien.voisin@dustri.org>
2019-03-21 22:26:06 +01:00
jvoisin 4e2b435abf Bump cglib version
Signed-off-by: jvoisin <julien.voisin@dustri.org>
2019-03-21 22:20:37 +01:00
jvoisin 4de26ac319 Remove pngfix
pngfix.js is used for compatibility's reason
with IE 5 and 6. I think that now that we're in 2019,
we can get rid of it.

Signed-off-by: jvoisin <julien.voisin@dustri.org>
2019-03-20 21:59:52 +01:00
jvoisin f501bfd5e1 Remove momentjs
MomentJS was only used in a single javascript function,
to do Seconds → (Minutes, Seconds). This commit
replaces this with a hand-rolled version, and removes
MomentJS.

Signed-off-by: jvoisin <julien.voisin@dustri.org>
2019-03-20 21:55:39 +01:00
Andrew DeMaria 143a220719 Merge remote-tracking branch 'airsonic/pr/849'
Conflicts:
	airsonic-main/cve-suppressed.xml
	airsonic-main/src/main/java/org/airsonic/player/controller/JAXBWriter.java
	airsonic-main/src/main/java/org/airsonic/player/service/PodcastService.java
	pom.xml
2019-03-16 19:27:53 -04:00
Andrew DeMaria 0d78c30d06 Change a couple more log entries to debug 2019-03-16 12:56:57 -04:00
Andrew DeMaria 360f469bf1 Merge remote-tracking branch 'airsonic/pr/895' 2019-03-16 12:55:02 -04:00
Andrew DeMaria 972c6cd462 Dont sign until verify stage 2019-03-16 12:53:30 -04:00
François-Xavier Thomas 2c1b5205e8 Write new db maintenance logs as 'debug' instead of 'info' 2019-03-16 17:32:00 +01:00
François-Xavier Thomas 7510b04efc Make checkpoint() method void (return value is not used) 2019-03-16 17:29:00 +01:00
François-Xavier Thomas 8c46d39569 Do not log message about hsqldb-defrag migration on each launch
The FILES DEFRAG / FILES LOG SIZE properties are kept when upgrading to
2.x; it's enough that they were set once on 1.8. For new installations
the migration will still run with the correct SQL statements.
2019-03-10 20:53:56 +01:00
François-Xavier Thomas b753e48632 Log more information when running the 'cleanup db' action 2019-03-09 13:33:59 +01:00
François-Xavier Thomas 76e8abd219 Move HSQLDB checkpoint/shutdown to a bean specific to the legacy profile 2019-03-09 13:33:59 +01:00
François-Xavier Thomas b88bdb37c9 Properly shutdown embedded HSQLDB database on exit 2019-03-08 23:48:32 +01:00
François-Xavier Thomas 54e444b03c Make CHECKPOINT / DEFRAG syntax work for both HSQLDB 1 & 2 2019-03-08 22:40:05 +01:00
Iwao AVE!andFrançois-Xavier Thomas c79c02d449 Updated CHECKPOINT / DEFRAG syntax for HSQLDB 2.
Signed-off-by: Iwao AVE! <harawata@gmail.com>
2019-03-08 22:40:05 +01:00
François-Xavier Thomas c0f3606091 Force database checkpoints on 'Clean-up' and 'Scan' actions
This will only affect the (embedded/legacy) HSQLDB driver. Even though
cff97ea9 should prevent the db log from getting uncontrollably large,
the 'Clean-up database' and 'Scan' actions will additionally force a
checkpoint to ensure this happens on big operations.
2019-03-08 22:40:05 +01:00
Andrew DeMaria 3fb697ddce Update Changelog
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
2019-02-18 22:46:10 -05:00
Andrew DeMaria 1a88f46c18 CVE-2018-20222 Prevent xxe during parse
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
2019-02-18 22:46:05 -05:00
Andrew DeMaria faedfd8a62 Bump version to 10.3.0-SNAPSHOT
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
2019-02-18 21:58:15 -05:00
Andrew DeMaria a16b89e0ac Bump to version 10.2.0-RELEASE
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
2019-02-16 11:38:17 -07:00
Andrew DeMaria a1abdb580b Update changelog 2019-02-16 11:34:36 -07:00
Andrew DeMaria e4bb808862 Merge remote-tracking branch 'origin/pr/869' 2019-02-16 10:46:18 -07:00
tesshuandAndrew DeMaria 3e6d224550 #1 CVE-2018-1000840
stax-api-1.0.1.jar
stax-api-1.0-2.jar
2019-02-16 10:38:47 -07:00
tesshuandAndrew DeMaria 6023d4c0bc fix #748 2019-02-16 10:38:47 -07:00
Ben Kelsey 8ea47b71ff Update jackson version 2019-02-09 17:56:54 -08:00