ec8fdb0df1
Remove the unused embedded copy of sbbi-upnplib
6 lat temu
f04ec61d0f
Merge remote-tracking branch 'airsonic/pr/958'
6 lat temu
58f4dfdb2e
Merge remote-tracking branch 'airsonic/pr/957'
6 lat temu
a59e8e4a9f
Merge remote-tracking branch 'airsonic/pr/956'
6 lat temu
afb9c6bfb7
Merge remote-tracking branch 'airsonic/pr/954'
6 lat temu
1daa6cff6e
Merge remote-tracking branch 'airsonic/pr/952'
6 lat temu
72609a8d0c
Merge remote-tracking branch 'airsonic/pr/950'
6 lat temu
c460a16628
Merge remote-tracking branch 'airsonic/pr/928'
6 lat temu
aff7bd3d57
Remove webfx stuff, since they're apparently not used
...
The only place where the string `webfx` is mentioned
was in playQueue.jsp, to include a small css file, twice,
that only applies to webfx components, that aren't used
anywhere in the codebase.
6 lat temu
db2592a84b
Delete AC_OETags.js since it's not used anywhere
6 lat temu
c9212805be
Remove jquery-contextmenu since it's not used anywhere
6 lat temu
87442320fc
Try to run jkd9 on travis-ci
6 lat temu
d35834c0e7
Fix a bunch of dom-based xss
...
This should close #633
6 lat temu
0d6cbb60ed
Use https for external links
6 lat temu
ab1690b1fe
Don't display the title if it's empty
6 lat temu
83882b18d9
Merge remote-tracking branch 'airsonic/pr/919'
6 lat temu
81835aa589
Merge remote-tracking branch 'airsonic/pr/934'
6 lat temu
f8f5c4a6bf
Merge remote-tracking branch 'airsonic/pr/936'
6 lat temu
b73ab9c45e
Merge remote-tracking branch 'airsonic/pr/949'
6 lat temu
78ee5bd1da
Merge remote-tracking branch 'airsonic/pr/948'
6 lat temu
221a0ed933
Merge remote-tracking branch 'airsonic/pr/945'
6 lat temu
ac1c887698
Remove Google+ relics
...
Google+ is dead: https://developers.google.com/+/
6 lat temu
cb0866d5fd
Download dependencies via https on download.java.net
6 lat temu
edd097ad5b
Add a couple of static analysis badges
6 lat temu
5edebf7885
Remove inline javascript on the `cancel` buttons
...
The inline javascript used with the cancel buttons
was only used to change the location.
Instead of doing this, it's easier to wrap
the button in a tag.
This is related to #909 .
6 lat temu
cd45717256
Merge remote-tracking branch 'airsonic/pr/938'
6 lat temu
570abe69d5
Merge remote-tracking branch 'airsonic/pr/939'
6 lat temu
d5500ce3d2
Merge remote-tracking branch 'airsonic/pr/941'
6 lat temu
41a5ae06d5
Merge remote-tracking branch 'airsonic/pr/922'
6 lat temu
6613bd86d5
Merge remote-tracking branch 'airsonic/pr/907'
6 lat temu
c9a209fd8f
Merge remote-tracking branch 'airsonic/pr/943'
6 lat temu
2b0fe25eff
Merge remote-tracking branch 'airsonic/pr/946'
6 lat temu
ba6b39b7b2
Add two <meta> tags
...
- Add a description, since this can be useful
in browser's histories
- Add a viewport, making it less worse to use
airsonic on a super-small screen
6 lat temu
4d5680931c
Add the dates of the releases to the changelog
6 lat temu
883022d81a
Remove script.aculo.us dependency
...
It's not used anywhere, using an old version,
and the project doesn't seem to be maintained anyway.
6 lat temu
910802b64f
Fix a small resource leak
6 lat temu
2f9046d6b4
Fix a xss and clean up some js
...
- Fix a stupid self-XSS. I doubt that there are ways to
use it against other users, but well, better safe than sorry
- Replace the javascript-on-focus hacks with the `autofocus` attribute
6 lat temu
bcc5f8d7a6
Fix StringIndexOutOfBounds errors thrown by DWR/YUI
6 lat temu
61c842923a
Generate new passwords in a secure way
...
Previously, lost passwords were generated via
org.apache.commons.lang.RandomStringUtils,
which is using java.util.Random internally.
This PRNG is has a 48-bit seed, that can easily be bruteforced
if an attacker is able to get the PRNG's output, for example
but resetting their own account multiple times,
leading to trivial privileges escalation attacks.
This commit makes use of java.security.SecureRandom
instead.
6 lat temu
e330eeb864
Remove coverity integration - not working
6 lat temu
4e73266a7f
Add travis ci badge
6 lat temu
897de26886
Remove comment
6 lat temu
bc0bfdf481
Update scan token
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
6 lat temu
fb0079d3c0
Merge remote-tracking branch 'origin/pr/932'
6 lat temu
54e1237320
Exclude new spring 5.0.5 cve
6 lat temu
5dc96ba011
Add coverity badge
6 lat temu
6f3c3312ee
Add coverity scan to travis
6 lat temu
8a1f36c792
Revert change to DWR fixes #923
...
Signed-off-by: Andrew DeMaria <lostonamountain@gmail.com>
6 lat temu
39b9eab715
Simplify a bit the css
6 lat temu
0b72acefed
Oups
6 lat temu
jvoisin
Andrew DeMaria
François-Xavier Thomas