MightyPork/airsonic-custom
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
739 Commits 2 Branches 0 Tags
6b4874f33ce92e14f102b6bf216ca5ea207fe780
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andrew DeMaria 685f4fa7e5 Merge remote-tracking branch 'origin/pr/801' 2018-09-29 10:07:52 -06:00
Andrew DeMaria d257800e1d Merge remote-tracking branch 'origin/pr/802' 2018-09-29 10:07:08 -06:00
Andrew DeMaria 8e1470a45a Dependency updates 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2018-09-28 20:54:01 -04:00
Andrew DeMariaandGitHub 8876f5866b Update stale.yml 2018-09-19 22:48:35 -06:00
Andrew DeMaria 995d1fa667 Remove potential cast exception 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2018-09-07 13:43:13 -06:00
Andrew DeMaria 30b767955e Merge remote-tracking branch 'origin/pr/790' 2018-09-07 13:24:31 -06:00
Andrew DeMaria 8ba0bc88f0 Fix maven version 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2018-08-11 10:22:46 -06:00
Andrew DeMaria c56416a9ca Merge remote-tracking branch 'origin/pr/774' 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2018-08-11 10:04:18 -06:00
Andrew DeMaria 85bf4b268d Change mirror 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2018-08-11 10:03:26 -06:00
Andrew DeMaria b6a9b32b1c Merge remote-tracking branch 'airsonic/pr/775' 2018-08-09 21:50:01 -04:00
Andrew DeMaria c2c14b0dbe Update dependency check 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2018-08-09 21:49:00 -04:00
Andrew DeMaria 5281d9ab6e Fix for false positive node vuln 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2018-08-09 21:48:49 -04:00
Andrew DeMaria f6905dec1b Merge remote-tracking branch 'airsonic/pr/767' 2018-08-01 19:00:43 -04:00
Andrew DeMaria e3ea7beb96 Fix #764 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2018-07-28 13:38:15 -06:00
Andrew DeMaria 8d3c0ec9a0 Updates 
- Update Spring boot Version
- Update dependency check version
- Exclude irrelevant nodejs cve

Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2018-07-08 00:20:44 -04:00
Andrew DeMaria 3e1ea6f913 Fix #749 Ensure transcode settings are protected 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2018-06-14 19:39:50 -04:00
Andrew DeMaria 431c98b496 Exclude cve CVE-2018-1115 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2018-06-14 18:58:58 -04:00
Andrew DeMaria a097597bca Merge remote-tracking branch 'airsonic/pr/700' 2018-06-14 18:49:23 -04:00
Andrew DeMaria 40c9debf8e Merge remote-tracking branch 'airsonic/pr/698' 2018-05-07 19:44:02 -04:00
Andrew DeMaria 36d773dbfc Update cxf 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2018-05-03 20:28:10 -04:00
Andrew DeMaria 2ea980d642 Update spring boot 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2018-05-03 20:25:57 -04:00
Andrew DeMaria bbccce2303 Merge remote-tracking branch 'airsonic/pr/699' 2018-05-03 19:37:59 -04:00
Andrew DeMaria 5cca85f516 Ignore irrelevant CVE 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2018-04-08 14:05:17 -04:00
Andrew DeMaria 893b652bcd Update dependency checker with updated maven too 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2018-04-08 14:04:45 -04:00
Andrew DeMaria ce5920ce4c Merge remote-tracking branch 'origin/pr/674' 2018-01-11 10:34:24 -07:00
Andrew DeMaria caae31452e Bump to 10.2.0 snapshot 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-12-21 11:09:31 -07:00
Andrew DeMaria dbd2a738eb Made it easier to see current playing song for dark themes 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-12-20 18:41:49 -07:00
Andrew DeMaria a93a18a055 Fixed elipse in english translation 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-12-20 18:15:16 -07:00
Andrew DeMaria b0aff38caf Fix #658 again: content type for unscaled images set based on jaudiotagger output 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-12-20 18:01:57 -07:00
Andrew DeMaria 11ec30cd9f Revert "Fix #658 content type for full size cover arts" 
This reverts commit 18b16eb859.
 2017-12-20 17:09:51 -07:00
Andrew DeMaria 18b16eb859 Fix #658 content type for full size cover arts 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-12-20 16:53:16 -07:00
Andrew DeMaria 535d5d06cb Release 10.1.1 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-12-16 14:03:40 -07:00
Andrew DeMaria ba481869c8 Updated changelog 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-12-16 14:03:05 -07:00
Andrew DeMaria 80e2617f04 Merge remote-tracking branch 'airsonic/pr/643' 2017-12-11 19:51:46 -07:00
Andrew DeMaria 511f278624 Merge remote-tracking branch 'airsonic/pr/647' 2017-12-11 19:51:03 -07:00
Andrew DeMaria 5e47bc500e Fix maven profile mixup with sign/tomcat-embed 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-12-04 19:35:04 -07:00
Andrew DeMaria e39f5d98d0 Fixed dependency check issues 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-11-18 12:42:48 -07:00
Andrew DeMaria c969a60eda Merge remote-tracking branch 'origin/pr/629' 2017-11-18 12:27:20 -07:00
Andrew DeMaria 78006946ea Bump 10.2.0-SNAPSHOT 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-11-04 12:15:57 -06:00
Andrew DeMaria e04cda4293 Release 10.1.0 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-11-04 12:06:02 -06:00
Andrew DeMaria 143cc5a40c Added gpg sign profile 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-11-04 12:05:56 -06:00
Andrew DeMaria 81525494ee Updated Changelog 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-11-04 11:32:32 -06:00
Andrew DeMaria c7789533a0 Don't require csrf for search endpoint 
Reasoning:

- It doesn't change state and is not a sensitive endpoint
- It really should be changed to GET but that is a bit more intrusive
  change that can be done at another time
- The search csrf token is stored on the top.jsp page for a long time.
  If the user keeps this tab open for a while it is possible the csrf
  token will change on their session with other requests going on such
  that the search csrf token becomes wrong/stale.

Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-10-29 15:10:49 -06:00
Andrew DeMaria ded28c4669 Merge remote-tracking branch 'airsonic/pr/604' 2017-10-23 20:27:37 -06:00
Andrew DeMaria 9a34d19726 Merge remote-tracking branch 'airsonic/pr/602' 2017-10-23 20:27:17 -06:00
Andrew DeMaria c0c359a8f0 Merge remote-tracking branch 'airsonic/pr/598' 2017-10-23 20:27:13 -06:00
Andrew DeMaria 438461933d Dep Check Plugin and update vuln dependencies 
Detail
------
Add a dependency check plugin to find reported issues with dependencies
we use.

From adding this, there were quite a few false positives which are
documented in airsonic-main/cve-suppressed.xml. The applicable
vulnerabilities are as follows:

```
commons-fileupload-1.2.jar (commons-fileupload:commons-fileupload:1.2,
cpe:/a:apache:commons_fileupload:1.2) : CVE-2016-3092, CVE-2016-1000031,
CVE-2014-0050, CVE-2013-0248
castor-core-1.3.1.jar (cpe:/a:castor:castor:1.3.1,
cpe:/a:castor_project:castor:1.3.1,
org.codehaus.castor:castor-core:1.3.1) : CVE-2014-3004
tomcat-embed-core-8.5.16.jar (cpe:/a:apache_software_foundation:tomcat:8.5.16, cpe:/a:apache:tomcat:8.5.16, cpe:/a:apache_tomcat:apache_tomcat:8.5.16, org.apache.tomcat.embed:tomcat-embed-core:8.5.16) : CVE-2017-12617
```

CVE-2016-1000031 is rated as CRITICAL, but we do not deserialize content
from any multipart uploads so doesn't apply.

Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-10-23 20:20:19 -06:00
Andrew DeMaria afa3a589df Removed ref to old project 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-10-19 14:00:53 -06:00
Andrew DeMaria 6fc6d90351 Merge remote-tracking branch 'airsonic/pr/591' 2017-10-09 09:05:56 -06:00
Andrew DeMaria 4bd1d47e9b Added note about formatting 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-10-09 08:40:00 -06:00
Andrew DeMaria 4bd885e674 Merge remote-tracking branch 'airsonic/pr/595' 2017-10-09 08:36:24 -06:00
Andrew DeMaria 05291ce100 Intellij: suppress maven pom error 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-09-17 14:17:18 -06:00
Andrew DeMaria 6ec86ff676 Remove extraneous import 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-09-16 09:59:20 -06:00
Andrew DeMaria 1c995c5de8 Fix #569 Missing param exception 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-09-16 09:49:19 -06:00
Andrew DeMaria ab602b7b19 Fixed missing wireup of dependency 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-09-16 09:25:13 -06:00
Andrew DeMaria 291e35f445 Merge remote-tracking branch 'origin/pr/550' 2017-09-02 15:05:44 -06:00
Andrew DeMaria 9710f14b65 Fix #549 - Use correct http method 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-09-01 18:48:53 -06:00
Andrew DeMaria 51853e53a1 REST api tweaks 
- Moved bookmark caching logic into service layer
- Removed returning "null" when writing to the response directly
- Finish renaming to subsonic rest controller

Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-09-01 18:13:50 -06:00
Andrew DeMaria 21ff0a1070 Rename rest controller to be clear this is for the subsonic api 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-09-01 18:06:17 -06:00
Andrew DeMaria ac9780a41a Merge remote-tracking branch 'airsonic/pr/538' 2017-08-27 16:15:49 -06:00
Andrew DeMaria 3312f5c114 Merge remote-tracking branch 'personal/master' 2017-08-23 20:59:34 -06:00
Andrew DeMaria ec68a8e7de Bump version to 10.1.0-SNAPSHOT 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-08-23 20:39:52 -06:00
Andrew DeMaria 00a5cf2907 Release 10.0.1 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-08-23 18:04:20 -06:00
Andrew DeMaria e8e229cf8b Move jdbc dependencies into the default war 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-08-23 17:41:20 -06:00
Andrew DeMaria dbf5841f8b Prevent changes to -Dairsonic.defaultMusicFolder from breaking the liquibase migration 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-08-22 20:20:02 -06:00
Andrew DeMaria 8b798d1d66 Fix spring-boot:run 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-08-20 20:15:26 -06:00
Andrew DeMaria 7d4ca2ffe2 Prep work for spring boot test 
- Added enforcer plugin
- Fix some version conflicts
- Moved custom initializer to spring.factories
- Bump spring boot version

Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-08-20 20:15:24 -06:00
Andrew DeMaria 753d76e0fe Moved main spring boot to main package 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-08-20 20:15:17 -06:00
Andrew DeMaria e03b85ba6f Fixed regression in password reset 
Caused by e3e9056548

Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-08-14 19:19:51 -06:00
Andrew DeMaria 2b714c6a91 Pretty up link 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-08-13 20:16:29 -06:00
Andrew DeMaria 2045e3a9b9 Fixed matrix link - thanks fyber 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-08-13 20:15:06 -06:00
Andrew DeMaria 222e8dbd33 Merge remote-tracking branch 'airsonic/pr/518' 2017-08-13 18:11:35 -06:00
Andrew DeMaria 15d6d2151f Merge remote-tracking branch 'airsonic/pr/511' 2017-08-13 17:53:48 -06:00
Andrew DeMaria 361d77ed61 Update version 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-08-13 17:52:38 -06:00
Andrew DeMaria 4b488cd349 Added example env file for systemd 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-08-12 13:56:23 -06:00
Andrew DeMaria bd9c793500 Added example airsonic.service 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-08-12 11:23:40 -06:00
Andrew DeMaria e4a96925fd Release 10.0.0 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-08-06 20:01:04 -06:00
Andrew DeMaria 9aa91a72bd Updated changelog 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-08-06 19:58:11 -06:00
Andrew DeMaria 316b06a2c9 Updated version to 10.0.0 
This was discussed in a dev irc meeting (https://gist.github.com/muff1nman/570a3021f5d98453333090bb933a3865).

It keeps our versioning different than parent fork versions.

Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-08-06 19:56:03 -06:00
Andrew DeMaria 7c32fea2a5 Added profile to embed additional jdbc drivers 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-08-06 19:06:07 -06:00
Andrew DeMaria 3132227590 Made dockerfile non version specific 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-08-04 14:11:56 -06:00
Andrew DeMaria e1ecc2444c Refactored dockerfile 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-08-03 21:43:22 -06:00
Andrew DeMaria 615f7eb1c4 Moved docker to profile 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-08-03 17:19:29 -06:00
Andrew DeMaria 86345a9c2c Moved docker to its own module 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-08-03 17:16:32 -06:00
Andrew DeMaria 3fcc3ea896 Merge remote-tracking branch 'airsonic/pr/497' 2017-08-03 16:33:06 -06:00
Andrew DeMaria b668988fc2 Merge remote-tracking branch 'airsonic/pr/504' 2017-08-03 16:30:14 -06:00
Andrew DeMaria 92f5953c71 Fixed path for styles 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-08-01 19:50:06 -06:00
Andrew DeMaria 989ca8cfb9 Merge remote-tracking branch 'airsonic/pr/496' 2017-08-01 19:46:11 -06:00
Andrew DeMaria 8168113fac Merge remote-tracking branch 'airsonic/pr/494' 2017-07-25 20:51:49 -06:00
Andrew DeMaria 461e752760 Merge remote-tracking branch 'airsonic/pr/493' 2017-07-25 20:51:30 -06:00
Andrew DeMaria b8a4e176db Updated README with community channels 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-07-20 15:41:18 -06:00
Andrew DeMaria c35c92ce57 Some light themeing added for MediaElement.js 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-07-17 21:13:39 -06:00
Andrew DeMaria a0e68b92c1 Migrate airsonic.org to use airsonic.github.io 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-07-17 12:07:27 -06:00
Andrew DeMaria d5321f9263 Updated version service to use github releases 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-07-17 12:06:15 -06:00
Andrew DeMaria 11317fba6e Removed extraneous mockito dependency 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-07-17 12:01:38 -06:00
Andrew DeMaria 17915d9081 Updated banner 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-07-16 10:35:05 -06:00
Andrew DeMaria 45ca72b5d5 Update history 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-07-16 10:25:30 -06:00
Andrew DeMaria 7bb94118b2 Keep libresonic in changelog 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-07-16 10:08:50 -06:00
Andrew DeMaria 5447141718 Setup backwards compatiblity with old libresonic.home 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-07-13 21:34:30 -06:00
Andrew DeMaria 348411cc0d Updated schema 35 with filesystem references 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-07-13 21:34:29 -06:00