Gauthier 946bdecec5 Merge commit from fork ...

This PR fixes a security issue where authenticated users could access and modify data belonging to
other users. The isOwnProfileOrAdmin() middleware was missing from several push subscription API
routes. As a result, any authenticated user on the instance could manipulate the userId parameter in
the URL to view or delete the push subscriptions of other users.

2026-02-28 00:58:50 +08:00

..

appDataVolume.ts

feat: add a warning if permissions are missing from config folder (#1030)

2024-10-24 18:13:11 +02:00

appVersion.ts

refactor: absolute imports with path alias (#2960) [skip ci]

2022-08-22 11:02:46 +09:00

asyncLock.ts

feat: map AniDB IDs from Hama agent to tvdb/tmdb/imdb IDs (#538)

2021-01-08 09:46:00 +09:00

customProxyAgent.ts

fix(proxy): configure proxy agent connection limits and IPv4 support (#2303)

2026-01-20 12:37:41 +01:00

dateHelpers.ts

build(deps): bump dependencies (#2796)

2022-08-17 20:43:35 +09:00

DbColumnHelper.ts

feat: add postgres support + migrations (#628)

2024-12-16 14:02:33 +01:00

dnsCache.ts

fix(dnscaching): display stats for DNS caching (#1858)

2025-08-20 17:32:59 +08:00

getHostname.ts

refactor(jellyfin): abstract jellyfin hostname, updated ui to reflect it, better validation (#773)

2024-06-13 19:06:33 +02:00

profileMiddleware.ts

Merge commit from fork

2026-02-28 00:58:50 +08:00

restartFlag.ts

refactor: switch from Fetch API to Axios (#1520)

2025-04-08 13:20:10 +02:00

typeHelpers.ts

fix: handle search results with collections (#3393)

2023-05-11 09:58:16 +09:00