vh/homepage
1
0
Fork 0
mirror of https://github.com/gethomepage/homepage.git synced 2026-09-30 07:51:17 -07:00
Code Issues Actions 8 Packages Projects Releases Wiki Activity
7,398 Commits 8 Branches 163 Tags
a1fb1900969d1ba0a93becbe84feacd5a4155eee
Commit Graph
5 Commits
Author SHA1 Message Date
shamoon 45af25d6ce Fix: revert changes to qbittorrent widget endpoints (#6467) 2026-03-27 08:05:31 -07:00
shamoon b5b502b433 Enhancement: use lighter endpoints for qbittorrent (#6388) 2026-03-04 11:40:20 -08:00
shamoonandBen Phelps b3cf985d4a Merge pull request from GHSA-24m5-7vjx-9x37 
* Restrict emby endpoints and proxy segments

* Dont allow path traversal in segments

* Restrict qbittorrent proxy endpoints

* Restrict npm proxy endpoints

* Restrict flood proxy endpoints

* Restrict tdarr proxy endpoints

* Restrict xteve proxy endpoints

* Restrict transmission proxy endpoints

* disallow non-mapped endpoints

this change drops all requests that have un-mapped endpoint queries

allowedEndpoints is added as a method to pass proxy requests via a regex on the endpoint

most widgets with custom proxies use either no endpoint, or a static one

Co-Authored-By: Ben Phelps <ben@phelps.io>
 2024-06-02 21:13:29 -07:00
Ben Phelps 616e56e3f5 fix qbittorrent widget 2022-09-27 10:49:03 +03:00
Ben Phelps 035dd25ece widget refactoring 2022-09-26 00:35:54 +03:00