homepage/src
shamoon 52cce0ee21 Merge pull request from GHSA-24m5-7vjx-9x37
* Restrict emby endpoints and proxy segments

* Dont allow path traversal in segments

* Restrict qbittorrent proxy endpoints

* Restrict npm proxy endpoints

* Restrict flood proxy endpoints

* Restrict tdarr proxy endpoints

* Restrict xteve proxy endpoints

* Restrict transmission proxy endpoints

* disallow non-mapped endpoints

this change drops all requests that have un-mapped endpoint queries

allowedEndpoints is added as a method to pass proxy requests via a regex on the endpoint

most widgets with custom proxies use either no endpoint, or a static one

Co-Authored-By: Ben Phelps <ben@phelps.io>
2024-06-03 09:04:21 -07:00
..
components Enhancement: separate Internet search settings for quicklaunch (#3541) 2024-05-31 21:24:42 -07:00
pages Merge pull request from GHSA-24m5-7vjx-9x37 2024-06-03 09:04:21 -07:00
skeleton Documentation: correct doc link in skeleton yaml (#2428) 2023-12-04 16:03:58 -08:00
styles Fix some quicklaunch size quirks 2024-01-31 23:41:48 -08:00
utils Merge pull request from GHSA-24m5-7vjx-9x37 2024-06-03 09:04:21 -07:00
widgets Merge pull request from GHSA-24m5-7vjx-9x37 2024-06-03 09:04:21 -07:00