1
0
Fork 0
mirror of https://github.com/jellyfin/jellyfin-web synced 2025-03-30 19:56:21 +00:00
Commit graph

28 commits

Author SHA1 Message Date
Joshua M. Boniface
509cbabedb Add confirmation for 3rd party repos
Adds a confirmation similar to the one performed during plugin
installation, when adding a 3rd party repository.

The safe domain is hardcoded to be "repo.jellyfin.org" as this is very
stable and we have no plans to change it. Individual mirrors don't need
to be specified since this is user-input content and they should be
using the main URL not the URL of a specific mirror.

The confirmation message makes explicit mention of the possibility of
malicious code from 3rd party repositories as well as updates that may
bring it in, and suggests only adding 3rd parties from trusted people.

The plugin install confirmation is also modified to use the same
conditional and an altered message similar to the above, again to
emphasize the potential security risks of 3rd party plugins.

Finally, some additional information is added to the Developer Info
section of the plugin page; specifically, the name of the repository the
plugin is sourced from as well as its URL. How this is obtained is a
hack, since these should probably be part of the main information about
the plugin and not each specific version, but this is worked around by
only showing the information from the first (i.e. newest) version.
2023-05-29 10:59:21 -04:00
Bill Thornton
909f03460c Fix installed plugin version html 2023-03-06 16:27:35 -05:00
Bill Thornton
4bc0eebee0 Fix XSS vulnerability in plugin repo pages 2023-01-09 11:11:33 -05:00
Bill Thornton
d4e9270897 Fix marked import 2021-11-10 00:09:56 -05:00
Bill Thornton
3c24cf5200 Fix dompurify import error 2021-09-05 00:58:39 -04:00
MrTimscampi
ca41303aab Allow markdown for plugin changelogs 2021-09-05 00:43:57 -04:00
MrTimscampi
269ea2ad55 Replace newlines in plugin changelogs with the proper HTML tag 2021-06-15 00:26:08 +02:00
dkanada
90d48d840d
select the version at the front of the list instead
Co-authored-by: Dmitry Lyzo <56478732+dmitrylyzo@users.noreply.github.com>
2021-03-06 13:41:43 +09:00
dkanada
c86306e6a7
invert version sorting for plugins
Co-authored-by: Dmitry Lyzo <56478732+dmitrylyzo@users.noreply.github.com>
2021-03-06 13:41:23 +09:00
dkanada
3489d716b2 fix issue with version sort 2021-02-25 20:03:38 +09:00
dkanada
13eeabf267 minor improvements to plugin pages 2021-02-24 00:06:53 +09:00
Bill Thornton
ef7ff894b4
Merge pull request #2083 from BaronGreenback/pluginMod
Multi-repository plugin modification
2020-11-21 15:33:16 -05:00
cameron clark
ac7cbceca9 Add Tranlation 2020-11-21 13:21:01 +00:00
BaronGreenback
2c49d481ac
IUpdate src/controllers/dashboard/plugins/add/index.js
Co-authored-by: dkanada <dkanada@users.noreply.github.com>
2020-11-21 09:03:48 +00:00
BaronGreenback
55a1819ad1
Update index.js 2020-11-19 15:05:03 +00:00
vitorsemeano
86a9f4e36f solved imports for alert, toast and confirm 2020-11-05 23:15:39 +00:00
vitorsemeano
923d53bb71 remove most of Dashboard global window usage 2020-11-05 23:11:47 +00:00
MrTimscampi
bfb8c7c1f6 Make import paths ES6-compatible 2020-11-05 22:58:26 +00:00
MrTimscampi
566a818ee6 Merge remote-tracking branch 'upstream/master' into apphost-es6 2020-08-08 21:07:21 +02:00
MrTimscampi
faa78ebff1 Fix string 2020-08-08 20:07:31 +02:00
MrTimscampi
c14b20727a Merge conditions in plugin install 2020-08-08 20:07:31 +02:00
MrTimscampi
af2fab85d1 Migrate add, installed, available plugin pages to ES6 2020-08-08 20:07:31 +02:00
dkanada
54eab501c9
Merge branch 'master' into titles 2020-08-02 16:57:13 +09:00
dkanada
3774008343 standardize key prefixes for translations 2020-08-01 00:18:24 +09:00
Cameron
675cad71d8 Migration of loading to ES6 module 2020-07-28 23:08:27 +01:00
Dmitry Lyzo
2e315a422f Fix require of ES6 module 2020-07-27 13:27:27 +03:00
Dmitry Lyzo
793d74e82f Fix wrong deminification 2020-07-27 13:12:05 +03:00
dkanada
a085bb5269 update routes for plugin and session pages 2020-07-26 20:31:16 +09:00
Renamed from src/controllers/dashboard/plugins/add.js (Browse further)