Pierre Rudloff
3a4f09dda0
Prevent SSRF requests
...
By validating the provided URL before passing it to youtube-dl
2022-02-27 11:00:33 +01:00
Pierre Rudloff
2afbfb4bf2
fixup! Don't redirect to REQUEST_URI when browsing to index.php Instead, we can make sure everything works correctly on index.php
2022-02-20 14:06:59 +01:00
Pierre Rudloff
bc14b6e45c
Don't redirect to REQUEST_URI when browsing to index.php
...
Instead, we can make sure everything works correctly on index.php
2022-02-20 13:28:57 +01:00
Pierre Rudloff
1e17dff21e
Use the new root_path service to make some code more portable
2021-02-09 22:35:32 +01:00
Pierre Rudloff
f2be3a7e5b
Use relative paths on debug error page
2021-02-09 22:31:41 +01:00
Pierre Rudloff
36ba147430
phpstan update
2021-02-07 12:42:03 +01:00
Pierre Rudloff
50fe879f16
Add route info to debug bar
2021-02-07 12:24:16 +01:00
Pierre Rudloff
9af922f3f1
Add Smarty collector to debug bar
2021-02-07 00:03:37 +01:00
Pierre Rudloff
bba5090ec3
We can't be sure of the class of the logger
2021-02-06 18:22:19 +01:00
Pierre Rudloff
5c0ed594f3
Debug bar
2021-02-06 15:35:09 +01:00
Pierre Rudloff
05311ac7b6
Add return types
2020-12-17 22:49:21 +01:00
Éric Gaspar
a5bda1d35e
Fix small typos ( #333 )
...
* Fix small typos
- *Fix cap on YouTube, AllTube...*
* Fix YouTube cap
2020-12-05 15:00:46 +01:00
Pierre Rudloff
f184bda59b
Make sure locale is always set, even on first request
2020-11-21 14:20:01 +01:00
Pierre Rudloff
2d1d69a1f1
Refactor some Robo code
2020-11-16 20:45:49 +01:00
Pierre Rudloff
c0b2acf33e
Don't restrict forms in CSP ( #327 )
2020-11-04 23:03:39 +01:00
Pierre Rudloff
7ad0040f60
Move container creation to a new App class
2020-10-22 23:11:29 +02:00
Pierre Rudloff
3d2b518cb4
Create a test container that we can use in any test
2020-10-22 22:48:47 +02:00
Pierre Rudloff
d83774ae7d
Cleaner way to get the domain
2020-10-22 21:40:20 +02:00
Pierre Rudloff
e1d7ad44e0
Make the bookmarklet compatible with ugly URLs
2020-10-22 01:36:00 +02:00
Pierre Rudloff
d97b824a44
Cleaner way to build ugly URLs
2020-10-22 01:26:17 +02:00
Pierre Rudloff
7d856c61fb
Cleaner way to build the redirect
2020-10-22 01:13:25 +02:00
Pierre Rudloff
7dead957f0
Fix bookmarklet behind a reverse proxy
2020-10-22 00:45:41 +02:00
Pierre Rudloff
6bb577bcce
Use default view variables
2020-10-22 00:45:09 +02:00
Pierre Rudloff
110bfc9ff1
Cleaner way to build the canonical URL
2020-10-22 00:28:36 +02:00
Pierre Rudloff
342b8c4a42
Use secure session cookies ( fixes #321 )
2020-10-21 23:04:29 +02:00
Pierre Rudloff
de8c5e5dc7
Convert SessionManager to a factory class
2020-10-21 22:48:05 +02:00
Pierre Rudloff
5b0ee7651b
Remove Config dependency on LocaleManager
2020-10-21 22:38:09 +02:00
Pierre Rudloff
e9cee39673
Allow manifest in CSP
2020-10-20 23:32:16 +02:00
Pierre Rudloff
0a220d4d8e
Move factory classes to a subfolder
2020-10-20 23:29:50 +02:00
Pierre Rudloff
123a6c5ad9
Move middleware to a subfolder
2020-10-20 23:17:22 +02:00
Pierre Rudloff
496ac212e2
Set Link header in PHP so it can work in a subfolder
2020-10-20 23:10:33 +02:00
Pierre Rudloff
4bcf9566ad
Improve CSP
2020-10-20 00:57:26 +02:00
Pierre Rudloff
f29a61f182
Upgrade pretty-package-versions to 1.5
...
So we can have a cleaner way to get the root package version
2020-10-20 00:22:34 +02:00
Pierre Rudloff
561b6c8370
Make the CSP compatible with debug tools
2020-10-19 23:59:23 +02:00
Pierre Rudloff
e2560cd9cb
Code cleanup
2020-10-19 22:29:30 +02:00
Pierre Rudloff
da93835ea2
Fix error when X-Forwarded-Path is not defined
2020-10-19 22:20:19 +02:00
bellington3
c5298dd24b
Provide basePath support ( #309 )
...
* Provide basePath support
To be able to serve the application via a reverse proxy in a subfolder
smarty needs to be aware of the basepath if any.
* Provide basepath support via X-Forwarded headers
* Fix warnings
* Review adjustments
* Provide support X-Forwarded-Host header
* Use $uri in view factory directly
* Use middleware to set basepath from X-Forwarded-Path header
* Fix invalid type hint in RouterPathMiddleware
* Add "X-Forwarded-Host" to README
2020-10-19 22:18:03 +02:00
Pierre Rudloff
234ecc2c6d
Log handled exceptions
2020-10-18 13:20:06 +02:00
Pierre Rudloff
07f19a80f4
Improve fallback error handling
2020-10-18 13:20:06 +02:00
Pierre Rudloff
9becaeaabe
Fix uglyUrls
2020-10-18 00:59:19 +02:00
Pierre Rudloff
15636aa435
Stop using a singleton for LocaleManager ( #298 )
2020-10-17 22:36:03 +02:00
Pierre Rudloff
fc6bf472b2
Stop using deprecated constant
2020-10-17 22:18:58 +02:00
Pierre Rudloff
7e2afd8221
Stop using a singleton for Config ( #298 )
2020-10-17 22:07:42 +02:00
bellington3
83863bd66c
Provide config toggle to disable the 'convert seek' function ( #311 )
...
* Provide config toggle to disable the 'convert seek' function in the frontend
* Add convertSeek config option to config.example
* Only send from/to if convertSeek is activated
2020-10-17 14:14:36 +02:00
bellington3
2e8350ce1a
Provide config toggle to set 'audio' conversion on as default ( #310 )
...
* Provide config toggle to set 'audio' conversion on as default
* Fix git cherry pick mistake
* Update templates/index.tpl
Co-authored-by: Pierre Rudloff <contact@rudloff.pro>
* Add default audio config option to config.example
Co-authored-by: Pierre Rudloff <contact@rudloff.pro>
2020-09-30 00:07:20 +02:00
Pierre Rudloff
8d15fbdda2
Lint
2020-09-27 16:06:49 +02:00
Pierre Rudloff
b6b4dad2ec
Custom 404 and 405 error pages
2020-07-15 23:17:23 +02:00
Pierre Rudloff
280618bb6b
Use a factory to Config and LocaleManager (see #298 )
2020-07-15 23:05:41 +02:00
Pierre Rudloff
96a75cbf14
Log youtube-dl and ffmpeg commands (fixes #297)
2020-07-15 22:52:38 +02:00
Pierre Rudloff
b02e255cb4
Avoid magic numbers
2020-07-05 11:22:55 +02:00