Commit Graph

4 Commits

Author SHA1 Message Date
shamoon
eda06965fa Chore: add organize imports to pre-commit (#5104)
Some checks failed
Docker CI / Linting Checks (push) Has been cancelled
Docker CI / Docker Build & Push (push) Has been cancelled
Crowdin Action / Crowdin Sync (push) Has been cancelled
2025-03-30 21:40:03 -07:00
shamoon
1c24bd7449 Chore: another big deps update (#4795) 2025-02-18 16:16:53 -08:00
shamoon
b3cf985d4a Merge pull request from GHSA-24m5-7vjx-9x37
* Restrict emby endpoints and proxy segments

* Dont allow path traversal in segments

* Restrict qbittorrent proxy endpoints

* Restrict npm proxy endpoints

* Restrict flood proxy endpoints

* Restrict tdarr proxy endpoints

* Restrict xteve proxy endpoints

* Restrict transmission proxy endpoints

* disallow non-mapped endpoints

this change drops all requests that have un-mapped endpoint queries

allowedEndpoints is added as a method to pass proxy requests via a regex on the endpoint

most widgets with custom proxies use either no endpoint, or a static one

Co-Authored-By: Ben Phelps <ben@phelps.io>
2024-06-02 21:13:29 -07:00
quietsy
c6770d233c Feature: SWAG dashboard widget (#3523) 2024-05-27 22:00:52 -07:00