1
0
Fork 0
mirror of https://github.com/jellyfin/jellyfin-web synced 2025-03-30 19:56:21 +00:00
Commit graph

20 commits

Author SHA1 Message Date
Joshua M. Boniface
a11d74ae68 Use camelCase variable name 2023-05-30 09:21:41 -04:00
Joshua M. Boniface
509cbabedb Add confirmation for 3rd party repos
Adds a confirmation similar to the one performed during plugin
installation, when adding a 3rd party repository.

The safe domain is hardcoded to be "repo.jellyfin.org" as this is very
stable and we have no plans to change it. Individual mirrors don't need
to be specified since this is user-input content and they should be
using the main URL not the URL of a specific mirror.

The confirmation message makes explicit mention of the possibility of
malicious code from 3rd party repositories as well as updates that may
bring it in, and suggests only adding 3rd parties from trusted people.

The plugin install confirmation is also modified to use the same
conditional and an altered message similar to the above, again to
emphasize the potential security risks of 3rd party plugins.

Finally, some additional information is added to the Developer Info
section of the plugin page; specifically, the name of the repository the
plugin is sourced from as well as its URL. How this is obtained is a
hack, since these should probably be part of the main information about
the plugin and not each specific version, but this is worked around by
only showing the information from the first (i.e. newest) version.
2023-05-29 10:59:21 -04:00
Bill Thornton
bc5c7817a8 Fix custom element creation 2022-05-05 02:12:38 -04:00
Bill Thornton
ee3c4a2681 Fix XSS in repositories list 2022-04-27 10:19:14 -04:00
Dmitry Lyzo
161ce2404b Add title to buttons 2022-03-03 17:19:27 +03:00
Dmitry Lyzo
119df2cc99 Add aria-hidden to button icons 2022-02-25 01:52:14 +03:00
Bill Thornton
7bd5788fa9 Fix repository url link not opening as external 2021-10-05 00:35:30 -04:00
Bill Thornton
f60b7686d0 Remove unused variables 2021-03-23 11:28:16 -04:00
Bill Thornton
a47f6d458c Move components css files to sass 2021-03-19 14:00:59 -04:00
Fernando Fernández
35296a88b1 fix: message appearing after adding repositories 2021-02-03 16:27:47 +01:00
Bill Thornton
dc50cacc83
Merge pull request #2163 from thornbill/fix-add-repo-form
Prevent default submit event on add plugin repo form
2020-12-04 01:05:16 -05:00
Bill Thornton
f9ee9aeeb3 Fix dashboard tab links 2020-12-03 16:13:27 -05:00
Bill Thornton
835dc1706d Prevent default submit event on add plugin repo form 2020-12-03 14:44:32 -05:00
MrTimscampi
bfb8c7c1f6 Make import paths ES6-compatible 2020-11-05 22:58:26 +00:00
dkanada
39eddeb205 run eslint to fix most var instances 2020-10-07 21:12:14 +09:00
dkanada
67ce56da95 remove some duplicate strings 2020-08-13 21:23:51 +09:00
Anthony Lavado
9da5704bda
Merge pull request #1577 from MrTimscampi/apphost-es6
Migrate appHost, qualityOptions, bundle and appLoader to es6
2020-08-11 14:05:28 -04:00
dkanada
23d0f25c74 remove some duplicate strings from the source 2020-08-09 23:10:58 +09:00
MrTimscampi
f16df9788a Migrate bundle, qualityOptions, appHost and appLoader 2020-08-06 19:32:29 +02:00
dkanada
a085bb5269 update routes for plugin and session pages 2020-07-26 20:31:16 +09:00
Renamed from src/controllers/dashboard/plugins/repositories.js (Browse further)