10 Commits

Author SHA1 Message Date
shamoon
1c24bd7449
Chore: another big deps update (#4795) 2025-02-18 16:16:53 -08:00
shamoon
907abee1aa
Enhancement: multiple widgets per service (#4338) 2024-11-27 02:33:40 -08:00
shamoon
b3cf985d4a Merge pull request from GHSA-24m5-7vjx-9x37
* Restrict emby endpoints and proxy segments

* Dont allow path traversal in segments

* Restrict qbittorrent proxy endpoints

* Restrict npm proxy endpoints

* Restrict flood proxy endpoints

* Restrict tdarr proxy endpoints

* Restrict xteve proxy endpoints

* Restrict transmission proxy endpoints

* disallow non-mapped endpoints

this change drops all requests that have un-mapped endpoint queries

allowedEndpoints is added as a method to pass proxy requests via a regex on the endpoint

most widgets with custom proxies use either no endpoint, or a static one

Co-Authored-By: Ben Phelps <ben@phelps.io>
2024-06-02 21:13:29 -07:00
shamoon
19c25713c4 Run pre-commit hooks over existing codebase
Co-Authored-By: Ben Phelps <ben@phelps.io>
2023-10-18 09:49:33 -07:00
Georges-Antoine Assi
bd1c2b1881
Add setting to hide widgets on failure 2023-04-30 19:09:37 -04:00
Daniel Rocha
96507e4eba Use byterate for flood 2023-02-19 07:46:51 -08:00
Michael Shamoon
94af8044f1 fix minor flood without a backend error 2022-12-06 15:36:53 -08:00
Michael Shamoon
01b55a17f1 fix flood lint 2022-12-01 16:53:57 -08:00
JigSawFr
8a84eba232
fix(widgets): move flood auth from BASIC to raw json body 2022-12-01 20:55:14 +01:00
JigSawFr
7087ed80cc
Add flood widget 2022-12-01 12:40:19 +01:00