51 Commits

Author SHA1 Message Date
shamoon
67a9f4983c Fix unifi with no type passing and lint 2024-06-03 11:19:54 -07:00
shamoon
f13144ceb8 Remove widget type passing 2024-06-03 09:20:26 -07:00
shamoon
d42271acf6
Fix: calendar integration broken in v0.9.0 (#3566) 2024-06-03 09:19:20 -07:00
shamoon
c96e6703d3 More path traversal fixes 2024-06-03 09:04:21 -07:00
shamoon
52cce0ee21 Merge pull request from GHSA-24m5-7vjx-9x37
* Restrict emby endpoints and proxy segments

* Dont allow path traversal in segments

* Restrict qbittorrent proxy endpoints

* Restrict npm proxy endpoints

* Restrict flood proxy endpoints

* Restrict tdarr proxy endpoints

* Restrict xteve proxy endpoints

* Restrict transmission proxy endpoints

* disallow non-mapped endpoints

this change drops all requests that have un-mapped endpoint queries

allowedEndpoints is added as a method to pass proxy requests via a regex on the endpoint

most widgets with custom proxies use either no endpoint, or a static one

Co-Authored-By: Ben Phelps <ben@phelps.io>
2024-06-03 09:04:21 -07:00
shamoon
e92ccc30ba Fix: only log errors directly if exist 2024-02-28 11:44:32 -08:00
shamoon
19c25713c4 Run pre-commit hooks over existing codebase
Co-Authored-By: Ben Phelps <ben@phelps.io>
2023-10-18 09:49:33 -07:00
shamoon
7cede1318e Support extra headers in widgets 2023-08-22 21:42:53 -07:00
shamoon
1e60553904 Allow coinmarketcap slugs 2023-07-13 21:39:45 -07:00
shamoon
e35a66d3f1 Suppory body in widget endpoint mappings 2023-02-18 22:18:27 -08:00
Ben Phelps
4d790feaae formatting cleanup 2022-09-26 14:42:31 +03:00
Ben Phelps
e1a3a82f75 utils cleanup, initial static generation 2022-09-26 12:04:37 +03:00
Ben Phelps
ec8700f3e9 fix widgets without mappings 2022-09-26 10:58:31 +03:00
Jason Fischer
808e79e2ac
Add Docker, Emby, Gotify, Jackett, and JellySeerr widgets 2022-09-25 16:15:47 -07:00
Ben Phelps
035dd25ece widget refactoring 2022-09-26 00:35:54 +03:00
Jason Fischer
03fa2f86d7
Add AdGuard, Bazarr, and Coin Market Cap widgets
- Allow setting HTTP method in widget.js
- Allow sending allow listed query params to proxy
2022-09-25 14:31:41 -07:00
Ben Phelps
562235f828 starting of widget refactoring 2022-09-25 19:43:47 +03:00
Jason Fischer
42fe535df7
Patch console object to instead use winston for logging
- Allow setting labels via new createLogger method
- Make logger initialization more robust
2022-09-21 23:37:17 -07:00
Ben Phelps
122b987fa3
Merge branch 'main' into feature/widget_strelaysrv 2022-09-21 09:05:42 +03:00
Ben Phelps
c024c4f01c
Merge pull request #241 from JazzFisch/add-logger
Add Winston for log handling
2022-09-21 09:03:52 +03:00
Jason Fischer
280bb5fc81
Add Winston for log handling
- write log data to 'homepage.log'
2022-09-20 20:16:04 -07:00
Pablo Garcia de los Salmones Valencia
f7000a280e
Add Syncthing Relay Server widget 2022-09-20 04:42:04 +02:00
Pablo Garcia de los Salmones Valencia
586ded6b3f
Add Mastodon widget 2022-09-20 03:41:10 +02:00
Ben Phelps
38356c31b0 handle when structure differs from expectation 2022-09-18 01:38:41 +03:00
Jason Fischer
33e6d54fd2
Fix issues with incorrect values in widgets
associated: #180
associated: #194
2022-09-17 09:17:03 -07:00
Ben Phelps
28b2f79e5b use aggregate mapped data
to reduce the size of the API responses
2022-09-17 13:05:44 +03:00
Jason Fischer
6c01a85077
Merge branch 'main' into add-qbittorrent 2022-09-16 23:19:24 -07:00
Ben Phelps
d7a161c088 remove map for now 2022-09-17 08:34:32 +03:00
Ben Phelps
3f17618ad5 allow endpoint specific maps 2022-09-17 08:32:40 +03:00
Jason Fischer
6da1e98c83
Add qBittorrent Widget
- extract cookie jar functionality into its own file
- use i18n for more strings in existing widgets

completes: #152
associated: #123
2022-09-16 19:11:57 -07:00
Jason Fischer
743a070724
Proposal to add ability to map data in a proxy 2022-09-16 11:33:11 -07:00
Ben Phelps
ddb2a74540 add AdGuard widget 2022-09-16 14:05:56 +03:00
Jason Fischer
7e99b3e505
Merge branch 'main' into add-lidarr 2022-09-14 19:41:43 -07:00
Jason Fischer
1f2639fbb5
Add Lidarr widget 2022-09-14 19:30:51 -07:00
Jason Fischer
b520713dc3
Add Bazarr widget
associated: #110
2022-09-14 16:15:26 -07:00
Jason Fischer
f750876425 Add the Jackett widget
- add the follow-redirect package
- add the tough-cookie package

Jackett API uses a redirect mechanism to set a CSRF token.
This CSRF token is stored in a cookie that is required to
be present or the API won't work.
2022-09-14 10:46:52 -07:00
Jason Fischer
95b6ea0e23 Merge main 2022-09-12 19:38:43 -07:00
Jason Fischer
b3db549a65 Add Transmission widget
- Update http.js to support writing request bodies
- Update http.js to support returning all response headers

resolves: #104
2022-09-12 19:35:47 -07:00
Francisco Coelho
b5538655e0 Add Prowlarr widget 2022-09-12 17:56:04 +01:00
Francisco Coelho
0c9c1c599f Merge branch 'main' of https://github.com/xicopitz/homepage 2022-09-12 09:37:42 +01:00
Ben Phelps
3660140539 consolidate api handlers 2022-09-12 10:59:56 +03:00
Ben Phelps
15a0e6cc54
Merge branch 'main' into main 2022-09-12 10:40:56 +03:00
Chris McGravey
1c158f743c - Add CoinMarketCap widget 2022-09-12 01:30:42 -05:00
Jason Fischer
f8aa1ba391 Add Readarr and SABnzbd widgets 2022-09-11 19:49:18 -07:00
Francisco Coelho
9d790894d5 Sabnzbd Support 2022-09-12 02:22:39 +01:00
Francisco Coelho
a304d87b8a Merge branch 'main' of https://github.com/xicopitz/homepage 2022-09-11 22:08:11 +01:00
Ben Phelps
4aedda7ba2 add Overseerr widget 2022-09-11 17:24:33 +03:00
Francisco Coelho
9831df1427 Update proxy.js 2022-09-11 04:39:40 +01:00
Ben Phelps
f74e8b9d32 linting and cleanup 2022-09-07 16:53:24 +03:00
Ben Phelps
bad436b858 fix jellyfin widget api calls 2022-09-05 08:19:50 +03:00