10317 Commits
Author SHA1 Message Date
Safihre 3376cb5143 Escape the server-supplied NNTP message during testing 2026-09-14 22:24:09 +02:00
renovate[bot] 2a30c7fc3c Update dependency apprise to v1.13.1 2026-09-14 07:54:00 +02:00
SABnzbd Automation f915992e2f Update translatable texts
[skip ci]
2026-09-14 05:00:08 +00:00
renovate[bot] 5bcea5a7df Update all dependencies 2026-09-14 06:59:12 +02:00
mnightingale 112d449446 Continue with the other RSS feed URIs when one fails 2026-09-11 14:35:33 +02:00
SABnzbd Automation cfde583ccc Update translatable texts
[skip ci]
2026-09-10 10:41:17 +00:00
Safihre 846c7b79b9 Correct Remember Me tooltip text 2026-09-10 12:40:40 +02:00
Safihre b18cdc38f8 Robustly strip HTML tags to prevent XSS
Previous HTML stripping could allow malformed or unclosed tags to pass through, potentially leading to Cross-Site Scripting (XSS) vulnerabilities if completed by the browser.

This change updates the regex to aggressively remove all HTML tags, even incomplete ones. The `knockout-extensions.js` code also now universally escapes HTML, removing a potential bypass. New tests confirm this behavior.
2026-09-10 12:37:01 +02:00
Safihre 26e17a47a5 Catch unexpected errors during RAR inspection
Malformed RAR file metadata can raise exceptions other than `rarfile.Error` (e.g., `ValueError` on a bad seek). Catching these broader exceptions prevents the assembler from crashing during inspection.
2026-09-10 12:37:01 +02:00
mnightingale 4e28b082f5 Avoid rebuilding lists when sorting the queue and checking for duplicates 2026-09-10 11:47:34 +02:00
mnightingale f372698127 Write the queue admin once per batch when removing or adding many jobs 2026-09-10 11:47:34 +02:00
mnightingale 2db268e9a6 Insert queued jobs with bisect and queue each priority group in arrival order 2026-09-10 11:47:34 +02:00
mnightingale b69bd10725 Add tests covering NzbQueue add, remove, reorder, priority and sorting 2026-09-10 11:47:34 +02:00
T3553 29699890d5 fix background color for .table-server-connections thead 2026-09-09 17:52:44 +02:00
SABnzbd Automation 0561dca19a Update translatable texts
[skip ci]
2026-09-08 20:45:23 +00:00
mnightingale b6bb27bf9b Only raise the forwarded-header advice for a peer that could be a proxy of ours 2026-09-08 22:44:12 +02:00
Michael Nightingale d73cdc7397 Stop treating routable special-purpose ranges as a local network 2026-09-08 22:44:12 +02:00
Michael Nightingale c01371a6af Refuse requests whose client a forwarded header hides 2026-09-08 22:44:12 +02:00
Michael Nightingale d8188b5428 Split subnet normalization out of ip_in_subnet 2026-09-08 22:44:12 +02:00
Michael Nightingale 7d9056736f Assert what the address tests were only evaluating 2026-09-08 22:44:12 +02:00
Safihre 9c76f05b69 Defer hachoir import for media duration checks
The hachoir library is a large dependency (~5-10MB memory usage) that is exclusively used by the `get_media_duration` function. By moving its import statement inside this function, hachoir is only loaded when its functionality is actively needed, reducing the application's overall memory footprint.
2026-09-08 22:37:01 +02:00
Safihre 675d7714ca Skip symlink tests if creation is not possible
On Windows, creating symbolic links requires either an elevated shell or Developer Mode. This introduces a runtime check to verify if symlinks can be created. Tests that rely on symlink creation are now skipped if this check fails, preventing unnecessary test failures in environments without the required permissions.
2026-09-08 14:56:29 +02:00
Safihre bcd1585ea1 Set timeout for translations job
Prevents the workflow from running indefinitely.
2026-09-08 13:24:58 +02:00
Safihre 9d365facaa Import same_directory for path validation 2026-09-08 12:17:17 +02:00
Safihre 948500799a Skip filesystem link behavior tests on Windows
These tests rely on a specific behavior of '..' in paths involving symbolic links, which differs on Windows where '..' is collapsed before the filesystem resolves links.
2026-09-08 12:16:47 +02:00
mnightingale d8815ef983 Treat a dangling link as a taken name and refuse it as a write target 2026-09-08 11:19:38 +02:00
mnightingale ff537363c6 Sanitize each part before checking it for traversal or the admin folder 2026-09-08 11:19:37 +02:00
mnightingale b58a25df07 Pin the tarfile behaviour that contains members against links in the destination 2026-09-08 11:19:36 +02:00
mnightingale 1ce8faafeb Contain renames using the resolved paths so links cannot redirect them 2026-09-08 11:19:35 +02:00
mnightingale 7dbecb0a2d Skip links and other non-regular members when extracting tar files 2026-09-08 11:19:34 +02:00
Safihre 8343f182aa Pass Discord webhook secrets to release workflow 2026-09-08 11:14:07 +02:00
renovate[bot] d3f691e695 Update all dependencies (#3617)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-07 04:49:02 +00:00
Safihre d25d857fc4 Remove ISSUES.txt and refer to wiki for known issues 2026-09-04 11:47:44 +02:00
Safihre 64f342ca1d Use dedicated token for tools update workflow
Replaces `github.token` with `secrets.AUTOMATION_GITHUB_TOKEN` to provide consistent and appropriate permissions for automated tasks like creating pull requests.
2026-09-04 11:43:30 +02:00
Safihre ab3ba4a53a Add Discord integration for release notes
Posts release notes automatically to designated Discord webhooks, supporting separate channels for pre-release and stable builds.
2026-09-04 11:37:54 +02:00
github-actions[bot]andSABnzbd Automation 169a42b08c 7-Zip 26.03 (#3615)
Co-authored-by: SABnzbd Automation <bugs@sabnzbd.org>
2026-09-04 11:35:45 +02:00
Safihre 6cbe811d10 Restore checkboxes color 2026-09-04 09:03:26 +02:00
SABnzbd Automation 33ff6800d2 Update translatable texts
[skip ci]
2026-09-04 06:50:18 +00:00
mnightingale ec61683097 Downloader hot path improvements (#3604)
* Guard the speed counters with their own lock so updates are not lost

* Update the speed counters without taking the Downloader lock

* Skip the downloader sleep once the loop rather than the connection is the limit

* Remove unused variable
2026-09-04 08:49:35 +02:00
SABnzbd Automation 069f978e64 Update translatable texts
[skip ci]
2026-09-03 09:25:36 +00:00
Safihre c65ce5d5aa Add tooltip to explain search filters in queue and history
Provide users with guidance on advanced search capabilities, including filter options like `cat:`, `status:`, and `priority:`.
Closes #3558
2026-09-03 11:24:44 +02:00
mnightingale 443b34ce55 Check the speed limit on its own lock so a held back connection does not hold up the Downloader 2026-09-02 22:13:55 +02:00
mnightingale fbe07dfb7e Refresh the time after waiting so the statistics keep their interval 2026-09-02 22:11:44 +02:00
mnightingale 168622ea47 Remove the unused MultiAddQueue and use a plain queue 2026-09-02 22:10:34 +02:00
Safihre ab702860df Refactor color scheme implementation
Moves theme-specific styles into main CSS files for each interface,
leveraging `color-scheme` and `light-dark()` CSS functions. This
consolidates styling, reduces HTTP requests, and improves automatic
dark/light mode detection based on OS preferences.
2026-09-02 22:02:33 +02:00
mnightingale 4a999a1908 Fix macOS tray crashing when the notification center is unavailable 2026-09-01 20:05:34 +02:00
mnightingale 975c552a6a Safer open folder from macOS menu 2026-09-01 18:47:03 +02:00
mnightingale 20915cc626 Fix mobile dropdown menu styling 2026-08-31 17:44:22 +02:00
mnightingale 4fde6e490c Update jQuery UI to 1.14.2 2026-08-31 16:32:13 +02:00
mnightingale 58c3c13954 Update jQuery to 3.7.1 2026-08-31 16:32:13 +02:00