f54e72026f
version upgrade of spring-boot-dependencies,spring-boot-maven-plugin
...
- Safety version for CVE-2019-3795
- Match the new jetty ecj version because the version of ecj used by
tomcat and jetty is different.
6 years ago
e69287cfe6
Minor frameset-related factorization
6 years ago
10e90beb30
Refactor stream integration test
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
6 years ago
17f1d45e08
Remove mentions of subsonic premium
6 years ago
90cb02105e
Add a noopener and noreferrer to external urls
...
- noreferrer is used to prevent the browser from sending the referrer
to the visited site
- noopener fixes a fun class of bug: https://mathiasbynens.github.io/rel-noopener/
6 years ago
cdd47b36d2
Clicking on the logo now redirects to home instead of about
...
The previous behaviour was confusing, because on
most websites, clicking on the logo will redirect
to the main page, and not on the about one.
6 years ago
a200dd0c37
Don't autocomplete the password field
...
I guess that this is a bit silly in 2019,
but since people tend to use weird browsers in weird
places, disabling autocompletion here might prevent
the password from ending up in some local cache.
6 years ago
9dea3e9051
Add a CONTRIBUTING.md file
6 years ago
ec4b969e2c
Replace latin encoding with utf-8
6 years ago
5acabcae19
Remove resource bundles for messages as well
6 years ago
eea9416fbe
[skip ci] Update stale labels
6 years ago
c3a1980ca2
Merge remote-tracking branch 'airsonic/pr/964'
6 years ago
15c6a8861b
Fix formatting on external player for firefox
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
6 years ago
b128479972
Merge remote-tracking branch 'airsonic/pr/962'
6 years ago
4b2cf99adf
Merge remote-tracking branch 'airsonic/pr/951'
6 years ago
8e0d49834c
Merge remote-tracking branch 'airsonic/pr/929'
6 years ago
ab33b34a67
Merge remote-tracking branch 'airsonic/pr/898'
...
Conflicts:
airsonic-main/src/main/java/org/airsonic/player/controller/StreamController.java
6 years ago
131713aaf4
With Jetty
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
6 years ago
4cd9e9deac
revert cling-core, cling-support, seamless-util and configuration
6 years ago
8ed98ebb6b
Merge remote-tracking branch 'airsonic/pr/980'
6 years ago
9fb56c031b
Fix the systemd unit file for OpenJDK
6 years ago
7d865ea7a9
Add a lost meta back
6 years ago
8f74db2ec1
Remove the unused embedded copy of weupnp
6 years ago
5c54bff5ac
Remove the unused embedded copy of jarbundler
6 years ago
258c68dd4d
Remove the embedded copy of appbundler
6 years ago
4a1a5467c7
Remove the embedded copy of ant-zip
6 years ago
422127e3f6
Replace the flash player with medialement.js for the shared media
6 years ago
3f4a49c95a
Fix dependency error with org.eclipse.jetty.jetty
...
This is only used by reflection, and should be provided by the servlet
container (Tomcat or Jetty).
6 years ago
51b738053f
Make it work even if Tomcat-specific exceptions are not available
...
When Tomcat is not available (for example, when using Jetty), the
ClientAbortException is not available either, causing an error when
starting the server.
This commit fixes that, and instead catches that exception (or its Jetty
equivalent) via reflection.
6 years ago
ec96b9711d
Show more informative messages while streaming
...
When streaming, log messages now show the URL and IP of the originating
request, so that it's easier to determine what client is listening to
something on the server.
6 years ago
417583ccaa
Do not show stack trace for client-side connection errors
...
The `ClientAbortException` exception indicates that the connection was
closed by the client, usually for something the server can do nothing
about (e.g. navigating outside of the page while it's loading).
Since this error happens often, this commit displays shorter error
messages when it does, without a large stack trace.
All other exceptions are handled just as before.
6 years ago
72e372157a
Remove WAP-related stuff
...
WAP (https://en.wikipedia.org/wiki/Wireless_Application_Protocol )
is a thing from the past that nobody is using anymore.
This should close #960
6 years ago
268dc6e13d
Factorise the key generation into a static method
6 years ago
f04ec61d0f
Merge remote-tracking branch 'airsonic/pr/958'
6 years ago
58f4dfdb2e
Merge remote-tracking branch 'airsonic/pr/957'
6 years ago
a59e8e4a9f
Merge remote-tracking branch 'airsonic/pr/956'
6 years ago
afb9c6bfb7
Merge remote-tracking branch 'airsonic/pr/954'
6 years ago
1daa6cff6e
Merge remote-tracking branch 'airsonic/pr/952'
6 years ago
72609a8d0c
Merge remote-tracking branch 'airsonic/pr/950'
6 years ago
c460a16628
Merge remote-tracking branch 'airsonic/pr/928'
6 years ago
aff7bd3d57
Remove webfx stuff, since they're apparently not used
...
The only place where the string `webfx` is mentioned
was in playQueue.jsp, to include a small css file, twice,
that only applies to webfx components, that aren't used
anywhere in the codebase.
6 years ago
db2592a84b
Delete AC_OETags.js since it's not used anywhere
6 years ago
c9212805be
Remove jquery-contextmenu since it's not used anywhere
6 years ago
87442320fc
Try to run jkd9 on travis-ci
6 years ago
d35834c0e7
Fix a bunch of dom-based xss
...
This should close #633
6 years ago
0d6cbb60ed
Use https for external links
6 years ago
3e07ea5288
Use a random key to "encrypt" the remember-me cookie's value
...
Since Spring's default remember-me technique is
terrible security-wise (`user:timstamp:md5(use:timestamp:password:key)`),
we should at least use a random key, instead of a fixed one,
otherwise, and attacker able to capture the cookies
might be able to trivially bruteforce offline
the password of the associated user.
6 years ago
ab1690b1fe
Don't display the title if it's empty
6 years ago
83882b18d9
Merge remote-tracking branch 'airsonic/pr/919'
6 years ago
81835aa589
Merge remote-tracking branch 'airsonic/pr/934'
6 years ago
tesshucom
jvoisin
Andrew DeMaria
jo
François-Xavier Thomas