advplyr e5b7aea46c Merge pull request #5063 from mandreko/idor-fixes ...

IDOR fixes

2026-03-08 17:26:03 -05:00

..

ApiKeyController.js

Update jwt secret handling

2025-07-08 16:39:50 -05:00

AuthorController.js

Fix updating author name merging with same name authors in a different library #4628

2026-02-21 16:00:38 -06:00

BackupController.js

…

CacheController.js

…

CollectionController.js

…

CustomMetadataProviderController.js

…

EmailController.js

…

FileSystemController.js

Fix pathexists filepath back to posix

2025-06-11 16:37:07 -05:00

LibraryController.js

Remove custom providers from library filterdata request

2025-10-19 10:54:26 +03:00

LibraryItemController.js

…

MeController.js

Fix IDOR bugs

2026-02-15 22:01:36 -05:00

MiscController.js

Update settings update endpoint to validate allowedOrigins is array

2025-10-10 18:00:37 -05:00

NotificationController.js

…

PlaylistController.js

…

PodcastController.js

Sanitize media item & episode description on update

2025-05-31 17:01:58 -05:00

RSSFeedController.js

…

SearchController.js

Fix Upload Lookup

2025-11-29 11:02:42 +01:00

SeriesController.js

…

SessionController.js

Fix admin user unable to close sessions of other users #4746

2025-10-13 09:50:01 -05:00

ShareController.js

…

StatsController.js

…

ToolsController.js

Replace advanced options with presets/advanced card

2025-05-02 17:24:46 -05:00

UserController.js

Update sessions modal to show username & update sessions endpoints to always return username

2025-07-16 16:56:07 -05:00