bf5f8cb713
Factorize scripts-2.0.js into utils.js
...
No need to include two different and super-small javascript "utils" files.
il y a 6 ans
f3b2c2ea7a
Add a missing taglib to homePager.jsp
...
The missing taglib is confusing coverity a bit,
and I think that it's a good practise to add it
anyway.
il y a 6 ans
3cfe2b31a1
Move some cast-related inline js to an external file
...
There is no point in having such a massive
blob of javascript inline in the page.
il y a 6 ans
7b628ed8dd
Merge remote-tracking branch 'origin/pr/1056'
il y a 6 ans
58daacd9ab
Jetty is only used by developers, and never in production
...
So we're free to completely ignore CVE against it.
il y a 6 ans
2c3ba680d8
[ci skip] Add Java version in issue template
il y a 6 ans
ab03526620
Fix two NULL-deref
il y a 6 ans
f57ad3f27b
Fix typo in anonymous user name ( #663 )
il y a 6 ans
ac0a722a10
Merge remote-tracking branch 'airsonic/pr/990'
il y a 6 ans
b51cdc1c5c
Merge remote-tracking branch 'airsonic/pr/1028'
il y a 6 ans
4537495baf
Merge remote-tracking branch 'airsonic/pr/1012'
il y a 6 ans
3cdecb87f4
Merge remote-tracking branch 'airsonic/pr/1037'
il y a 6 ans
8a90d9f77b
Add system properties for persisting the 'remember me' key
...
This adds the 'airsonic.rememberMeKey' system property (can be set from
command-line with `-Dairsonic.rememberMeKey=<value>`) as well as a
'RememberMeKey' setting in airsonic.properties, so that the key used for
generating 'remember me' tokens can be persisted across server restarts.
It also adds a default, insecure key in case we are running in
development mode with the 'airsonic.development' property set.
il y a 6 ans
3ee6fefe11
Bump jQuery/jquery-ui to the latest versions
...
I bumped it first to 2.X with jQuery migrate, played around but didn't manage
to trigger any warning. So I bumped it again to the latest available version,
jQuery 3.4.0, which isn't triggering useful warnings either.
il y a 6 ans
b663a2fb90
Fix a stored XSS
il y a 6 ans
348c698e35
Remove the /db page
...
This page wasn't linked anywhere, and was
allowing an administrator to issue arbitrary sql
comments, and was vulnerable to reflected XSS.
We should get rid of it. If you really want to issue
SQL commands, just ssh to your instance and do it from here.
il y a 6 ans
d3970a5c62
Fix various minor issues found by LGTM
...
- Unnecessary boxing
- Integer overflow
- Path traversal via zip
- Dangerous synchronization pattern
il y a 6 ans
a911ebab80
Merge remote-tracking branch 'origin/pr/1027'
il y a 6 ans
df352d8cb0
Fix #611 Add support for Java 9 and greater
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
il y a 6 ans
2162250101
Revert "Minor frameset-related factorization"
...
This reverts commit e69287cfe6
il y a 6 ans
925ecdaa03
Add a gitlab-ci file
il y a 6 ans
3d54ef1afb
Mark the player cookie httpOnly
...
It doesn't improve much security-wise,
but it's a good practise anyway.
il y a 6 ans
8f608485cb
Fix a typo
il y a 6 ans
8123716d52
Remove unused loggers
il y a 6 ans
4a06823057
Balance some synchronized
...
Balance synchronized used on getters and not setters
as well as the other way around.
il y a 6 ans
d2f40b710b
Fix a possible stacktrace on RandomPlayQueue
il y a 6 ans
a14c8549fa
Merge remote-tracking branch 'origin/pr/963'
il y a 6 ans
a3e59e9724
Fix file encoding
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
il y a 6 ans
e5c36d9854
Fix variable name
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
il y a 6 ans
d8a5d1afad
Merge remote-tracking branch 'origin/pr/1034'
il y a 6 ans
afc2f58ac5
Merge remote-tracking branch 'origin/pr/1036'
il y a 6 ans
ab07462530
Update tomcat to 8.5.40
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
il y a 6 ans
820a4faec2
Avoid logging sensitive URL parameters in the Subsonic API
...
In case of exceptions, Airsonic logs the full URL that triggered it
since 417583cc
il y a 6 ans
41408bc2c3
Replace the double-mustache anti-pattern
...
Because Double Brace Initialization (DBI) creates an anonymous class with a
reference to the instance of the owning object, its use can lead to memory
leaks if the anonymous inner class is returned and held by other objects. Even
when there's no leak, DBI is so obscure that it's bound to confuse most
maintainers.
il y a 6 ans
c6825cf0d7
Minor refactorization of two methods in AbstractDao
il y a 6 ans
d9f164499f
Fix cancel button colors in 'Groove' dark theme
il y a 6 ans
1463f75b06
Merge remote-tracking branch 'origin/pr/961'
il y a 6 ans
693336af83
Merge remote-tracking branch 'origin/pr/967'
il y a 6 ans
e2e1554e93
Merge remote-tracking branch 'origin/pr/968'
il y a 6 ans
cddc2b2fa7
Merge remote-tracking branch 'origin/pr/983'
il y a 6 ans
d03b4dd963
Merge remote-tracking branch 'origin/pr/984'
il y a 6 ans
2030caa219
Merge remote-tracking branch 'origin/pr/994'
il y a 6 ans
1bd70263bd
Merge remote-tracking branch 'origin/pr/989'
il y a 6 ans
24f5c2d8f5
Merge remote-tracking branch 'origin/pr/1005'
il y a 6 ans
3f9c525933
Merge remote-tracking branch 'origin/pr/1007'
il y a 6 ans
50964fa378
Merge remote-tracking branch 'origin/pr/1002'
il y a 6 ans
326583839e
Merge remote-tracking branch 'origin/pr/982'
il y a 6 ans
a2b423aa82
Merge remote-tracking branch 'origin/pr/1020'
il y a 6 ans
f5250e36f1
Merge remote-tracking branch 'origin/pr/1021'
il y a 6 ans
fdfa244ad4
Merge remote-tracking branch 'origin/pr/1022'
il y a 6 ans
jvoisin
Andrew DeMaria
jvoisin
Jonas L
François-Xavier Thomas