1
0
Fork 0
mirror of https://github.com/jellyfin/jellyfin-web synced 2025-03-30 19:56:21 +00:00
Commit graph

1463 commits

Author SHA1 Message Date
Joshua M. Boniface
eaae0f3c55 Add translation of "unknown" repo details 2023-06-28 22:49:58 -04:00
Joshua M. Boniface
93d63330fd Fix conditional formatting and add fallback 2023-05-30 10:39:27 -04:00
Joshua M. Boniface
f1b0b504dd
Check for pkg.versions.length
Co-authored-by: Niels van Velzen <nielsvanvelzen@users.noreply.github.com>
2023-05-30 10:35:46 -04:00
Joshua M. Boniface
919be18c84 Fix syntax error in HTML 2023-05-30 10:13:21 -04:00
Joshua M. Boniface
cf530b30d5 Fix linting errors
* Remove superfluous variable
* Remove extra random spaces from editor
* Use single-quotes around text
2023-05-30 09:35:23 -04:00
Joshua M. Boniface
dd004ec06b Add labels to i8n 2023-05-30 09:25:32 -04:00
Joshua M. Boniface
a11d74ae68 Use camelCase variable name 2023-05-30 09:21:41 -04:00
Joshua M. Boniface
da9eece6c0 Remove extra console.log 2023-05-29 11:19:13 -04:00
Joshua M. Boniface
509cbabedb Add confirmation for 3rd party repos
Adds a confirmation similar to the one performed during plugin
installation, when adding a 3rd party repository.

The safe domain is hardcoded to be "repo.jellyfin.org" as this is very
stable and we have no plans to change it. Individual mirrors don't need
to be specified since this is user-input content and they should be
using the main URL not the URL of a specific mirror.

The confirmation message makes explicit mention of the possibility of
malicious code from 3rd party repositories as well as updates that may
bring it in, and suggests only adding 3rd parties from trusted people.

The plugin install confirmation is also modified to use the same
conditional and an altered message similar to the above, again to
emphasize the potential security risks of 3rd party plugins.

Finally, some additional information is added to the Developer Info
section of the plugin page; specifically, the name of the repository the
plugin is sourced from as well as its URL. How this is obtained is a
hack, since these should probably be part of the main information about
the plugin and not each specific version, but this is worked around by
only showing the information from the first (i.e. newest) version.
2023-05-29 10:59:21 -04:00
Bill Thornton
069ea049eb Fix xss in api key page 2023-05-11 16:48:06 -04:00
Dmitry Lyzo
1fb5c4d95d Fix query selector target 2023-05-02 22:36:51 +03:00
Ian Walton
bd480aa1db Escape device id in raw HTML. 2023-04-22 10:12:58 -04:00
nyanmisaka
f28db6699d Add tonemap mode options
Signed-off-by: nyanmisaka <nst799610810@gmail.com>
2023-04-14 18:50:24 +08:00
Brett Petch
a2ffa9dfaf Update src/controllers/dashboard/encodingsettings.html
Co-authored-by: Bill Thornton <thornbill@users.noreply.github.com>
2023-04-12 10:08:25 -04:00
Brett Petch
3c8c6ad469 fix: dead link 2023-04-12 10:08:11 -04:00
Bill Thornton
909f03460c Fix installed plugin version html 2023-03-06 16:27:35 -05:00
Bill Thornton
4bc0eebee0 Fix XSS vulnerability in plugin repo pages 2023-01-09 11:11:33 -05:00
Dmitry Lyzo
fe4ee0c101 fix locale with suffix
"Locale with suffix" is constructed only once with the initial
(browser) locale.
2022-10-06 11:48:15 +03:00
Niels van Velzen
7936502047
Fix serverId in item details download request
Co-authored-by: Bill Thornton <thornbill@users.noreply.github.com>
2022-07-27 08:59:47 +02:00
Niels van Velzen
5489f34b92 Add title and filename to download request in item details 2022-07-26 22:16:06 +02:00
Bill Thornton
db346e4c05
Merge pull request #3760 from nielsvanvelzen/fix-logs-submit
Fix saving log settings not working
2022-07-11 14:28:24 -04:00
Niels van Velzen
b05c7e3309 Fix saving log settings not working 2022-07-10 17:21:59 +02:00
Niels van Velzen
7c33579260 Fix splash screen checkbox always unchecked 2022-07-06 13:34:56 +02:00
nyanmisaka
cbfa0acfb3 Expose VPP TM brightness/contrast gain options 2022-06-16 23:55:55 +08:00
Bill Thornton
0bd774dd45
Merge pull request #3694 from crobibero/disable-splashscreen
Add the ability to enable/disable the splashscreen
2022-06-14 10:28:33 -04:00
Nyanmisaka
e8e531ffb2
Remove MPEG4 hwaccel from AMF 2022-06-14 02:19:09 +08:00
Cody Robibero
801d656d48 Add the ability to enable/disable the splashscreen 2022-06-12 08:50:49 -06:00
Dmitry Lyzo
abbc5963f2 Show PlaySettings button even if transcoding isn't supported 2022-05-22 14:55:59 +03:00
Dmitry Lyzo
a3fd4ba62f Remove play button highlighting 2022-05-20 10:32:14 +03:00
Bill Thornton
91c9a26e4d Fix artists album lists 2022-05-11 12:40:42 -04:00
Bill Thornton
f2226ee745
Merge pull request #3604 from thornbill/fix-custom-elements
Fix custom element creation
2022-05-06 13:30:10 -04:00
Bill Thornton
d0ee66c2ce Fix backdrop being used on large screens in mobile layout 2022-05-05 10:38:45 -04:00
Bill Thornton
bc5c7817a8 Fix custom element creation 2022-05-05 02:12:38 -04:00
Bill Thornton
4792631f06
Merge pull request #3543 from Shadowghost/strm-display-fix 2022-04-29 14:09:05 -04:00
Bill Thornton
f7e2f07c05
Merge pull request #3597 from nielsvanvelzen/qc-text-input
Use text input in Quick Connect page
2022-04-27 15:23:47 -04:00
Bill Thornton
ee3c4a2681 Fix XSS in repositories list 2022-04-27 10:19:14 -04:00
Niels van Velzen
b00e93dd3d Require at least 6 characters in Quick Connect input 2022-04-27 10:25:00 +02:00
Niels van Velzen
d03aed23c8 Use text input in Quick Connect page 2022-04-26 19:35:57 +02:00
Shadowghost
b69b9227c4 Add track sorting to mediainfo and player track selection 2022-04-07 11:37:57 +02:00
Shadowghost
dc956eb48c Restore sort order after jellyfin/jellyfin#7529, allow subtitle selector display whithout video stream 2022-04-06 23:53:42 +02:00
Dmitry Lyzo
e7b80b7fa2 fix: Fix 'resume' when clicking on item details poster
Find the element with 'action'.
2022-03-31 21:05:01 +03:00
Dmitry Lyzo
9338dd082b fix: Escape HTML 2022-03-29 02:25:54 +03:00
Bill Thornton
e023448146
Merge pull request #3505 from dmitrylyzo/fix-html-escape
Fix HTML escaping
2022-03-21 10:28:14 -04:00
Felix Oswald
659657b62d
escaped ExternalUrls with escapeHtml() 2022-03-19 11:26:03 +01:00
Felix Oswald
2521b06142
escaped location with escapeHtml() 2022-03-19 09:50:40 +01:00
Dmitry Lyzo
4929bfd350 Fix HTML escaping
Regression: 59adbc348a
2022-03-19 10:51:52 +03:00
Felix Oswald
55ad352d08
escaped location to prevent xss 2022-03-18 21:17:19 +01:00
Felix Oswald
e6465ec6ec
Fix birth location link 2022-03-18 15:15:31 +01:00
grafixeyehero
3886b7da1f apply suggestion 2022-03-10 10:23:52 -05:00
grafixeyehero
2aa41f8a33 Convert userPasswordPage & UserImagePage to react 2022-03-10 10:23:52 -05:00