MightyPork/airsonic-custom
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
713 Commits 2 Branches 0 Tags
69e2ba08254a2fee8b6326d1cae4539c9ed8cf4c
Commit Graph
133 Commits
Author SHA1 Message Date
Peter Marheine 69e2ba0825 Use HTTPS and java.net.URI for scrobbling 
HTTPS will help prevent eavesdropping on the auth token, and using URI
will ensure unusual characters (like spaces, accidental or otherwise)
are escaped correctly.

Fixes #588

Signed-off-by: Peter Marheine <peter@taricorp.net>
 2018-08-01 18:04:22 +10:00
Peter MarheineandAndrew DeMaria cfdedea452 Suppress CVE-2018-13684 for dependency-check 
False positive matching ant-zip against a CVE for ZIP, an Ethereum
token.

Signed-off-by: Peter Marheine <peter@taricorp.net>
 2018-07-31 12:00:05 -06:00
Andrew DeMaria e3ea7beb96 Fix #764 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2018-07-28 13:38:15 -06:00
Andrew DeMaria 8d3c0ec9a0 Updates 
- Update Spring boot Version
- Update dependency check version
- Exclude irrelevant nodejs cve

Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2018-07-08 00:20:44 -04:00
Andrew DeMaria 3e1ea6f913 Fix #749 Ensure transcode settings are protected 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2018-06-14 19:39:50 -04:00
Andrew DeMaria 431c98b496 Exclude cve CVE-2018-1115 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2018-06-14 18:58:58 -04:00
Andrew DeMaria a097597bca Merge remote-tracking branch 'airsonic/pr/700' 2018-06-14 18:49:23 -04:00
snw35 6a44c5c815 Handle player id as an Integer instead of String 2018-06-04 20:19:12 +01:00
François-Xavier Thomas b3f432a545 Issue #164: Add tests for reading MusicBrainz release tags 2018-05-22 23:33:27 +02:00
François-Xavier Thomas c76a92746d Issue #164: Show link to MusicBrainz release on album pages 2018-05-22 23:17:33 +02:00
Andrew DeMaria 40c9debf8e Merge remote-tracking branch 'airsonic/pr/698' 2018-05-07 19:44:02 -04:00
jo 30ffc9560b Fix wrong case 2018-05-04 01:45:00 +02:00
Andrew DeMaria bbccce2303 Merge remote-tracking branch 'airsonic/pr/699' 2018-05-03 19:37:59 -04:00
Andrew DeMaria 5cca85f516 Ignore irrelevant CVE 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2018-04-08 14:05:17 -04:00
Bonome 070df25f45 catch exceptions ClientAbortException display a short message and return, to avoid the massive useless traceback in log 
Signed-off-by: Bonome <bonome@tak.blue>
 2018-04-04 17:39:44 +02:00
jo b259f32bc4 Fix themes using dark background with me_js 2018-02-27 20:01:17 +01:00
jo d1e190af0c Remove margin of media_control bar 2018-02-27 20:00:39 +01:00
jo 159d5f67fa Fix #596 2018-02-27 17:45:28 +01:00
jo 6204409c5e New add_album to play queue 2018-02-27 15:58:44 +01:00
Romain DEP. c2416a57a8 deps: update jackson to a vuln-free version, 
bump java-jwt in the process
 2018-02-27 02:28:58 +01:00
Rémi Cocula be91fb08c4 fix issues #638 and #574 2018-01-20 22:38:33 +01:00
Romain DEP. d8eac74cb6 Reverted a93a18a and properly re-encoded with 'native2ascii -encoding UTF-8' 2018-01-10 19:09:55 +01:00
Andrew DeMaria caae31452e Bump to 10.2.0 snapshot 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-12-21 11:09:31 -07:00
Andrew DeMaria dbd2a738eb Made it easier to see current playing song for dark themes 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-12-20 18:41:49 -07:00
Andrew DeMaria a93a18a055 Fixed elipse in english translation 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-12-20 18:15:16 -07:00
Andrew DeMaria b0aff38caf Fix #658 again: content type for unscaled images set based on jaudiotagger output 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-12-20 18:01:57 -07:00
Andrew DeMaria 11ec30cd9f Revert "Fix #658 content type for full size cover arts" 
This reverts commit 18b16eb859.
 2017-12-20 17:09:51 -07:00
Andrew DeMaria 18b16eb859 Fix #658 content type for full size cover arts 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-12-20 16:53:16 -07:00
Andrew DeMaria 535d5d06cb Release 10.1.1 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-12-16 14:03:40 -07:00
StarkadandJonas L 429fa1fb92 Fixed botched up css (Substandard) (#652) 
Signed-off-by:Manuel Müller <manuel.mueller@geekinbusiness.de>
 2017-12-15 15:21:17 +01:00
Andrew DeMaria 80e2617f04 Merge remote-tracking branch 'airsonic/pr/643' 2017-12-11 19:51:46 -07:00
Andrew DeMaria 511f278624 Merge remote-tracking branch 'airsonic/pr/647' 2017-12-11 19:51:03 -07:00
Manuel Müller 524d8da190 suppressed vulnerabiltiy warning in build, for Postgres JDBC-Driver, 
since it's a vulnerability in Postgre itself
Signed-off-by:Manuel Müller <manuel.mueller@geekinbusiness.de>
 2017-12-11 22:48:14 +01:00
Allen Petersen dcf41ce9e0 Issue 617 
Restores optimization in AlbumUpnpProcessor and instead re-implements
default behavior in RecentAlbumUpnpProcessor subclass.
 2017-12-11 09:44:08 -05:00
Allan NordhøyandGitHub 766fec1bf8 escaped &s 2017-12-11 04:08:08 +01:00
Allen Petersen b4ef434c08 Issue 617 
Removes an incorrect override in AlbumUpnpProcessor which was preventing
RecentAlbumUpnpProcessor from behaving correctly.

Also adds a correct getAllItemsSize() implementation for
RecentAlbumUpnpProcessor.
 2017-12-09 23:12:16 -05:00
Allan NordhøyandGitHub 5a04a8b42b Reverting apostrophes and double quotes 2017-12-06 02:01:59 +01:00
Andrew DeMaria 5e47bc500e Fix maven profile mixup with sign/tomcat-embed 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-12-04 19:35:04 -07:00
Allan NordhøyandGitHub 3c95553dc5 Language rework 2017-12-03 20:12:56 +01:00
Robert Sprunk 756d178978 Upgrade jaudiotagger to 2.2.5 supporting Java 9 
Signed-off-by: Robert Sprunk <github@sprunk.me>
 2017-11-21 12:30:23 +01:00
Shen-Ta HsiehandAndrew DeMaria ab33bf2cee Add show-all button on artist listing page 2017-11-18 10:21:25 -07:00
Andrew DeMaria 78006946ea Bump 10.2.0-SNAPSHOT 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-11-04 12:15:57 -06:00
Andrew DeMaria e04cda4293 Release 10.1.0 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-11-04 12:06:02 -06:00
Andrew DeMaria 143cc5a40c Added gpg sign profile 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-11-04 12:05:56 -06:00
Andrew DeMaria c7789533a0 Don't require csrf for search endpoint 
Reasoning:

- It doesn't change state and is not a sensitive endpoint
- It really should be changed to GET but that is a bit more intrusive
  change that can be done at another time
- The search csrf token is stored on the top.jsp page for a long time.
  If the user keeps this tab open for a while it is possible the csrf
  token will change on their session with other requests going on such
  that the search csrf token becomes wrong/stale.

Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-10-29 15:10:49 -06:00
Andrew DeMaria ded28c4669 Merge remote-tracking branch 'airsonic/pr/604' 2017-10-23 20:27:37 -06:00
Andrew DeMaria 9a34d19726 Merge remote-tracking branch 'airsonic/pr/602' 2017-10-23 20:27:17 -06:00
Andrew DeMaria c0c359a8f0 Merge remote-tracking branch 'airsonic/pr/598' 2017-10-23 20:27:13 -06:00
Andrew DeMaria 438461933d Dep Check Plugin and update vuln dependencies 
Detail
------
Add a dependency check plugin to find reported issues with dependencies
we use.

From adding this, there were quite a few false positives which are
documented in airsonic-main/cve-suppressed.xml. The applicable
vulnerabilities are as follows:

```
commons-fileupload-1.2.jar (commons-fileupload:commons-fileupload:1.2,
cpe:/a:apache:commons_fileupload:1.2) : CVE-2016-3092, CVE-2016-1000031,
CVE-2014-0050, CVE-2013-0248
castor-core-1.3.1.jar (cpe:/a:castor:castor:1.3.1,
cpe:/a:castor_project:castor:1.3.1,
org.codehaus.castor:castor-core:1.3.1) : CVE-2014-3004
tomcat-embed-core-8.5.16.jar (cpe:/a:apache_software_foundation:tomcat:8.5.16, cpe:/a:apache:tomcat:8.5.16, cpe:/a:apache_tomcat:apache_tomcat:8.5.16, org.apache.tomcat.embed:tomcat-embed-core:8.5.16) : CVE-2017-12617
```

CVE-2016-1000031 is rated as CRITICAL, but we do not deserialize content
from any multipart uploads so doesn't apply.

Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-10-23 20:20:19 -06:00
Jonas LandGitHub a2a6591d36 Add "opus" and "mka" extension to default 
This add 2 more extensions to the default scanned audio files. see #603 for more details
 2017-10-23 19:02:08 +02:00