MightyPork/airsonic-custom
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
978 Commits 2 Branches 0 Tags
bec5cec4a22acdada8ba606f2fa9946993e83bdc
Commit Graph
330 Commits
Author SHA1 Message Date
Andrew DeMaria 8d3c0ec9a0 Updates 
- Update Spring boot Version
- Update dependency check version
- Exclude irrelevant nodejs cve

Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2018-07-08 00:20:44 -04:00
Andrew DeMaria 3e1ea6f913 Fix #749 Ensure transcode settings are protected 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2018-06-14 19:39:50 -04:00
Andrew DeMaria 431c98b496 Exclude cve CVE-2018-1115 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2018-06-14 18:58:58 -04:00
Andrew DeMaria a097597bca Merge remote-tracking branch 'airsonic/pr/700' 2018-06-14 18:49:23 -04:00
snw35 6a44c5c815 Handle player id as an Integer instead of String 2018-06-04 20:19:12 +01:00
François-Xavier Thomas b3f432a545 Issue #164: Add tests for reading MusicBrainz release tags 2018-05-22 23:33:27 +02:00
François-Xavier Thomas c76a92746d Issue #164: Show link to MusicBrainz release on album pages 2018-05-22 23:17:33 +02:00
Andrew DeMaria 40c9debf8e Merge remote-tracking branch 'airsonic/pr/698' 2018-05-07 19:44:02 -04:00
jo 30ffc9560b Fix wrong case 2018-05-04 01:45:00 +02:00
Andrew DeMaria bbccce2303 Merge remote-tracking branch 'airsonic/pr/699' 2018-05-03 19:37:59 -04:00
Andrew DeMaria 5cca85f516 Ignore irrelevant CVE 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2018-04-08 14:05:17 -04:00
Bonome 070df25f45 catch exceptions ClientAbortException display a short message and return, to avoid the massive useless traceback in log 
Signed-off-by: Bonome <bonome@tak.blue>
 2018-04-04 17:39:44 +02:00
jo b259f32bc4 Fix themes using dark background with me_js 2018-02-27 20:01:17 +01:00
jo d1e190af0c Remove margin of media_control bar 2018-02-27 20:00:39 +01:00
jo 159d5f67fa Fix #596 2018-02-27 17:45:28 +01:00
jo 6204409c5e New add_album to play queue 2018-02-27 15:58:44 +01:00
Romain DEP. c2416a57a8 deps: update jackson to a vuln-free version, 
bump java-jwt in the process
 2018-02-27 02:28:58 +01:00
Rémi Cocula be91fb08c4 fix issues #638 and #574 2018-01-20 22:38:33 +01:00
Romain DEP. d8eac74cb6 Reverted a93a18a and properly re-encoded with 'native2ascii -encoding UTF-8' 2018-01-10 19:09:55 +01:00
Andrew DeMaria caae31452e Bump to 10.2.0 snapshot 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-12-21 11:09:31 -07:00
Andrew DeMaria dbd2a738eb Made it easier to see current playing song for dark themes 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-12-20 18:41:49 -07:00
Andrew DeMaria a93a18a055 Fixed elipse in english translation 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-12-20 18:15:16 -07:00
Andrew DeMaria b0aff38caf Fix #658 again: content type for unscaled images set based on jaudiotagger output 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-12-20 18:01:57 -07:00
Andrew DeMaria 11ec30cd9f Revert "Fix #658 content type for full size cover arts" 
This reverts commit 18b16eb859.
 2017-12-20 17:09:51 -07:00
Andrew DeMaria 18b16eb859 Fix #658 content type for full size cover arts 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-12-20 16:53:16 -07:00
Andrew DeMaria 535d5d06cb Release 10.1.1 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-12-16 14:03:40 -07:00
StarkadandJonas L 429fa1fb92 Fixed botched up css (Substandard) (#652) 
Signed-off-by:Manuel Müller <manuel.mueller@geekinbusiness.de>
 2017-12-15 15:21:17 +01:00
Andrew DeMaria 80e2617f04 Merge remote-tracking branch 'airsonic/pr/643' 2017-12-11 19:51:46 -07:00
Andrew DeMaria 511f278624 Merge remote-tracking branch 'airsonic/pr/647' 2017-12-11 19:51:03 -07:00
Manuel Müller 524d8da190 suppressed vulnerabiltiy warning in build, for Postgres JDBC-Driver, 
since it's a vulnerability in Postgre itself
Signed-off-by:Manuel Müller <manuel.mueller@geekinbusiness.de>
 2017-12-11 22:48:14 +01:00
Allen Petersen dcf41ce9e0 Issue 617 
Restores optimization in AlbumUpnpProcessor and instead re-implements
default behavior in RecentAlbumUpnpProcessor subclass.
 2017-12-11 09:44:08 -05:00
Allan NordhøyandGitHub 766fec1bf8 escaped &s 2017-12-11 04:08:08 +01:00
Allen Petersen b4ef434c08 Issue 617 
Removes an incorrect override in AlbumUpnpProcessor which was preventing
RecentAlbumUpnpProcessor from behaving correctly.

Also adds a correct getAllItemsSize() implementation for
RecentAlbumUpnpProcessor.
 2017-12-09 23:12:16 -05:00
Allan NordhøyandGitHub 5a04a8b42b Reverting apostrophes and double quotes 2017-12-06 02:01:59 +01:00
Andrew DeMaria 5e47bc500e Fix maven profile mixup with sign/tomcat-embed 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-12-04 19:35:04 -07:00
Allan NordhøyandGitHub 3c95553dc5 Language rework 2017-12-03 20:12:56 +01:00
Robert Sprunk 756d178978 Upgrade jaudiotagger to 2.2.5 supporting Java 9 
Signed-off-by: Robert Sprunk <github@sprunk.me>
 2017-11-21 12:30:23 +01:00
Shen-Ta HsiehandAndrew DeMaria ab33bf2cee Add show-all button on artist listing page 2017-11-18 10:21:25 -07:00
Andrew DeMaria 78006946ea Bump 10.2.0-SNAPSHOT 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-11-04 12:15:57 -06:00
Andrew DeMaria e04cda4293 Release 10.1.0 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-11-04 12:06:02 -06:00
Andrew DeMaria 143cc5a40c Added gpg sign profile 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-11-04 12:05:56 -06:00
Andrew DeMaria c7789533a0 Don't require csrf for search endpoint 
Reasoning:

- It doesn't change state and is not a sensitive endpoint
- It really should be changed to GET but that is a bit more intrusive
  change that can be done at another time
- The search csrf token is stored on the top.jsp page for a long time.
  If the user keeps this tab open for a while it is possible the csrf
  token will change on their session with other requests going on such
  that the search csrf token becomes wrong/stale.

Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-10-29 15:10:49 -06:00
Andrew DeMaria ded28c4669 Merge remote-tracking branch 'airsonic/pr/604' 2017-10-23 20:27:37 -06:00
Andrew DeMaria 9a34d19726 Merge remote-tracking branch 'airsonic/pr/602' 2017-10-23 20:27:17 -06:00
Andrew DeMaria c0c359a8f0 Merge remote-tracking branch 'airsonic/pr/598' 2017-10-23 20:27:13 -06:00
Andrew DeMaria 438461933d Dep Check Plugin and update vuln dependencies 
Detail
------
Add a dependency check plugin to find reported issues with dependencies
we use.

From adding this, there were quite a few false positives which are
documented in airsonic-main/cve-suppressed.xml. The applicable
vulnerabilities are as follows:

```
commons-fileupload-1.2.jar (commons-fileupload:commons-fileupload:1.2,
cpe:/a:apache:commons_fileupload:1.2) : CVE-2016-3092, CVE-2016-1000031,
CVE-2014-0050, CVE-2013-0248
castor-core-1.3.1.jar (cpe:/a:castor:castor:1.3.1,
cpe:/a:castor_project:castor:1.3.1,
org.codehaus.castor:castor-core:1.3.1) : CVE-2014-3004
tomcat-embed-core-8.5.16.jar (cpe:/a:apache_software_foundation:tomcat:8.5.16, cpe:/a:apache:tomcat:8.5.16, cpe:/a:apache_tomcat:apache_tomcat:8.5.16, org.apache.tomcat.embed:tomcat-embed-core:8.5.16) : CVE-2017-12617
```

CVE-2016-1000031 is rated as CRITICAL, but we do not deserialize content
from any multipart uploads so doesn't apply.

Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-10-23 20:20:19 -06:00
Jonas LandGitHub a2a6591d36 Add "opus" and "mka" extension to default 
This add 2 more extensions to the default scanned audio files. see #603 for more details
 2017-10-23 19:02:08 +02:00
Andrew DeMaria afa3a589df Removed ref to old project 
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
 2017-10-19 14:00:53 -06:00
Allen Petersen 31aca4fcdf Issue 570 
Issue 455

(570) Adds a settings option to ignore symlinks during the media scan.

(4550 Adds a regular expression pattern to exclude in addition to the option
of excluding symlinks.
 2017-10-14 16:15:56 -04:00
Jim Hribar e554bc8ec6 Stop airsonic from creating double slashes in urls. 
Signed-off-by: Jim Hribar <me@jimhribar.com>
 2017-10-14 12:29:57 -04:00