1114 Commits (c74ef2ea30739242e516822990d20376e36f341d)

 

All Branches   

Search

Author	SHA1	Message	Date
jvoisin	3ee6fefe11	Bump jQuery/jquery-ui to the latest versions ... I bumped it first to 2.X with jQuery migrate, played around but didn't manage to trigger any warning. So I bumped it again to the latest available version, jQuery 3.4.0, which isn't triggering useful warnings either.	7 years ago
jvoisin	b663a2fb90	Fix a stored XSS	7 years ago
jvoisin	348c698e35	Remove the /db page ... This page wasn't linked anywhere, and was allowing an administrator to issue arbitrary sql comments, and was vulnerable to reflected XSS. We should get rid of it. If you really want to issue SQL commands, just ssh to your instance and do it from here.	7 years ago
jvoisin	d3970a5c62	Fix various minor issues found by LGTM ... - Unnecessary boxing - Integer overflow - Path traversal via zip - Dangerous synchronization pattern	7 years ago
Andrew DeMaria	a911ebab80	Merge remote-tracking branch 'origin/pr/1027'	7 years ago
Andrew DeMaria	df352d8cb0	Fix #611 Add support for Java 9 and greater ... Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
Andrew DeMaria	2162250101	Revert "Minor frameset-related factorization" ... This reverts commit e69287cfe6. Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
jvoisin	925ecdaa03	Add a gitlab-ci file	7 years ago
jvoisin	3d54ef1afb	Mark the player cookie httpOnly ... It doesn't improve much security-wise, but it's a good practise anyway.	7 years ago
jvoisin	8f608485cb	Fix a typo	7 years ago
jvoisin	8123716d52	Remove unused loggers	7 years ago
jvoisin	4a06823057	Balance some synchronized ... Balance synchronized used on getters and not setters as well as the other way around.	7 years ago
jvoisin	d2f40b710b	Fix a possible stacktrace on RandomPlayQueue	7 years ago
Andrew DeMaria	a14c8549fa	Merge remote-tracking branch 'origin/pr/963'	7 years ago
Andrew DeMaria	a3e59e9724	Fix file encoding ... Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
Andrew DeMaria	e5c36d9854	Fix variable name ... Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
Andrew DeMaria	d8a5d1afad	Merge remote-tracking branch 'origin/pr/1034'	7 years ago
Andrew DeMaria	afc2f58ac5	Merge remote-tracking branch 'origin/pr/1036'	7 years ago
Andrew DeMaria	ab07462530	Update tomcat to 8.5.40 ... Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
François-Xavier Thomas	820a4faec2	Avoid logging sensitive URL parameters in the Subsonic API ... In case of exceptions, Airsonic logs the full URL that triggered it since 417583cc, including possibly sensitive query parameters such as the authentication password/tokens passed to the Subsonic API. This replaces the value set for this parameter in the URL by the "<hidden>" string.	7 years ago
jvoisin	41408bc2c3	Replace the double-mustache anti-pattern ... Because Double Brace Initialization (DBI) creates an anonymous class with a reference to the instance of the owning object, its use can lead to memory leaks if the anonymous inner class is returned and held by other objects. Even when there's no leak, DBI is so obscure that it's bound to confuse most maintainers.	7 years ago
jvoisin	c6825cf0d7	Minor refactorization of two methods in AbstractDao	7 years ago
François-Xavier Thomas	d9f164499f	Fix cancel button colors in 'Groove' dark theme	7 years ago
Andrew DeMaria	1463f75b06	Merge remote-tracking branch 'origin/pr/961'	7 years ago
Andrew DeMaria	693336af83	Merge remote-tracking branch 'origin/pr/967'	7 years ago
Andrew DeMaria	e2e1554e93	Merge remote-tracking branch 'origin/pr/968'	7 years ago
Andrew DeMaria	cddc2b2fa7	Merge remote-tracking branch 'origin/pr/983'	7 years ago
Andrew DeMaria	d03b4dd963	Merge remote-tracking branch 'origin/pr/984'	7 years ago
Andrew DeMaria	2030caa219	Merge remote-tracking branch 'origin/pr/994'	7 years ago
Andrew DeMaria	1bd70263bd	Merge remote-tracking branch 'origin/pr/989'	7 years ago
Andrew DeMaria	24f5c2d8f5	Merge remote-tracking branch 'origin/pr/1005'	7 years ago
Andrew DeMaria	3f9c525933	Merge remote-tracking branch 'origin/pr/1007'	7 years ago
Andrew DeMaria	50964fa378	Merge remote-tracking branch 'origin/pr/1002'	7 years ago
Andrew DeMaria	326583839e	Merge remote-tracking branch 'origin/pr/982'	7 years ago
Andrew DeMaria	a2b423aa82	Merge remote-tracking branch 'origin/pr/1020'	7 years ago
Andrew DeMaria	f5250e36f1	Merge remote-tracking branch 'origin/pr/1021'	7 years ago
Andrew DeMaria	fdfa244ad4	Merge remote-tracking branch 'origin/pr/1022'	7 years ago
Andrew DeMaria	fe08dd1c94	Merge remote-tracking branch 'origin/pr/1023'	7 years ago
Andrew DeMaria	969394a1c9	Merge remote-tracking branch 'origin/pr/1006'	7 years ago
jvoisin	a21188a064	Add a permission check for the podcast folder ... This should make podcast-related stacktraces a bit more obvious to debug for users.	7 years ago
jvoisin	716fd3635c	Remove a useless test page	7 years ago
jvoisin	e2683024af	Factorize a bit the checkbox-related CSS ... Since the `border: 0;` property is applied to every checkbox, there is no need for a class. This is also a good opportunity to use ternaries for the `checked` attribute, instead of clumsy `if`.	7 years ago
jvoisin	cf1f86f226	Move some video-cast-related inline js to an external file	7 years ago
jvoisin	af4165310f	Fix yet an other XSS	7 years ago
tesshucom	f54e72026f	version upgrade of spring-boot-dependencies,spring-boot-maven-plugin ... - Safety version for CVE-2019-3795 - Match the new jetty ecj version because the version of ecj used by tomcat and jetty is different.	7 years ago
jvoisin	e69287cfe6	Minor frameset-related factorization	7 years ago
Andrew DeMaria	10e90beb30	Refactor stream integration test ... Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>	7 years ago
jvoisin	17f1d45e08	Remove mentions of subsonic premium	7 years ago
tesshucom	133cf666b7	Fix processing when artist and albumArtist are null	7 years ago
tesshucom	f5f1ec336f	Fix to get fields when file format is ID3v2.4	7 years ago