9 Commits

Author SHA1 Message Date
shamoon
52cce0ee21 Merge pull request from GHSA-24m5-7vjx-9x37
* Restrict emby endpoints and proxy segments

* Dont allow path traversal in segments

* Restrict qbittorrent proxy endpoints

* Restrict npm proxy endpoints

* Restrict flood proxy endpoints

* Restrict tdarr proxy endpoints

* Restrict xteve proxy endpoints

* Restrict transmission proxy endpoints

* disallow non-mapped endpoints

this change drops all requests that have un-mapped endpoint queries

allowedEndpoints is added as a method to pass proxy requests via a regex on the endpoint

most widgets with custom proxies use either no endpoint, or a static one

Co-Authored-By: Ben Phelps <ben@phelps.io>
2024-06-03 09:04:21 -07:00
Georges-Antoine Assi
bd1c2b1881
Add setting to hide widgets on failure 2023-04-30 19:09:37 -04:00
Michael Shamoon
21017e4716 Add detailed Error component for service widgets 2022-11-18 15:24:07 -08:00
Michael Shamoon
319d3bfae3 Change npm widget to use httpProxy not fetch 2022-11-06 18:05:22 -08:00
Jason Fischer
9b7d6b196f
Allow widget field visibility to be configurable 2022-09-29 21:15:25 -07:00
Ben Phelps
0a58f259ff wrapped proxy calls via useWidgetAPI 2022-09-27 22:59:14 +03:00
Ben Phelps
4386999c38 further restructuring 2022-09-26 15:25:10 +03:00
Ben Phelps
e1a3a82f75 utils cleanup, initial static generation 2022-09-26 12:04:37 +03:00
Ben Phelps
47bc073fb4 widget refactoring and cleanup 2022-09-26 02:23:02 +03:00