PrivateCoffee/alltube
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
1505 commits 1 branch 0 tags 4.5 MiB
Commit graph

1505 commits

This branch
This branch
All branches
Author SHA1 Message Date
Pierre Rudloff
8913f27716 Disable the generic extractor entirely 
It can be used for SSRF attacks even when redirects are disabled
 2022-03-08 09:29:57 +01:00
Pierre Rudloff
148a171b24 Merge branch 'hotfix/3.0.2' 2022-02-27 12:32:36 +01:00
Pierre Rudloff
1b099bb983 Patch youtube-dl to disable redirects 
In order to prevent SSRF attacks using redirects
 2022-02-27 12:30:15 +01:00
Pierre Rudloff
3a4f09dda0 Prevent SSRF requests 
By validating the provided URL before passing it to youtube-dl
 2022-02-27 11:00:33 +01:00
Pierre Rudloff
2afbfb4bf2 fixup! Don't redirect to REQUEST_URI when browsing to index.php Instead, we can make sure everything works correctly on index.php 2022-02-20 14:06:59 +01:00
Pierre Rudloff
3ab22c654a Merge branch 'hotfix/3.0.1' 2022-02-20 13:31:40 +01:00
Pierre Rudloff
bc14b6e45c Don't redirect to REQUEST_URI when browsing to index.php 
Instead, we can make sure everything works correctly on index.php
 2022-02-20 13:28:57 +01:00
Pierre Rudloff
cf82f1cc8f
Add security policy 2022-02-19 20:47:53 +01:00
dependabot[bot]
fb78ecb410 Bump smarty/smarty from 3.1.39 to 3.1.43 (#383) 
Bumps smarty/smarty from 3.1.39 to 3.1.43.

---
updated-dependencies:
- dependency-name: smarty/smarty
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-01-13 00:05:49 +01:00
Pierre Rudloff
eeda434b2f Merge branch 'release-3.0.0' 2021-04-20 23:16:45 +02:00
Pierre Rudloff
b902c9027b Upgrade youtube-dl to 2021.04.01 (fixes #349) 2021-04-02 21:05:50 +02:00
Advizormcpe1
be3f7d9a82 Updated japanese translation 2021-02-28 18:34:07 +01:00
Pierre Rudloff
97d6532388 Merge branch 'master' into develop 2021-02-26 22:53:09 +01:00
dependabot[bot]
6ab19b6d84
Bump smarty/smarty from 3.1.33 to 3.1.39 (#346) 
Bumps smarty/smarty from 3.1.33 to 3.1.39.

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2021-02-26 22:48:17 +01:00
Pierre Rudloff
73e4fc1b13 Missing root_path service in tests 2021-02-22 21:16:29 +01:00
Pierre Rudloff
9688244285 Remove donation links 2021-02-22 21:12:23 +01:00
Pierre Rudloff
104a866188 Japanese translation 2021-02-22 21:10:58 +01:00
Pierre Rudloff
3cfd450258 Use a stable release of debugbar-smarty 2021-02-11 19:36:11 +01:00
Pierre Rudloff
1e17dff21e Use the new root_path service to make some code more portable 2021-02-09 22:35:32 +01:00
Pierre Rudloff
f2be3a7e5b Use relative paths on debug error page 2021-02-09 22:31:41 +01:00
Pierre Rudloff
9a27e7764a Upgrade grumphp to 1.3 
In order to use the new securitychecker_enlightn task
 2021-02-07 13:40:02 +01:00
Pierre Rudloff
36ba147430 phpstan update 2021-02-07 12:42:03 +01:00
Pierre Rudloff
50fe879f16 Add route info to debug bar 2021-02-07 12:24:16 +01:00
Pierre Rudloff
9af922f3f1 Add Smarty collector to debug bar 2021-02-07 00:03:37 +01:00
Pierre Rudloff
bba5090ec3 We can't be sure of the class of the logger 2021-02-06 18:22:19 +01:00
Pierre Rudloff
5c0ed594f3 Debug bar 2021-02-06 15:35:09 +01:00
Pierre Rudloff
58f79c5012 Use enlightn/security-checker instead of sensiolabs/security-checker (fixes #342) 2021-02-02 21:26:26 +01:00
Pierre Rudloff
5d550a100d Disable coverage in phpunit 
It causes an error on Travis and it is not used anymore
 2021-02-02 00:27:24 +01:00
Pierre Rudloff
077bb4762e Merge branch 'master' into develop 2021-02-01 21:27:07 +01:00
prog-it
03d6a59b26
Russian translation (#341) 2021-02-01 21:26:23 +01:00
Pierre Rudloff
05311ac7b6 Add return types 2020-12-17 22:49:21 +01:00
Pierre Rudloff
f2785bca03 Clear Smarty compiled templates before controller tests 
In order to avoid permission errors
 2020-12-17 22:30:19 +01:00
Pierre Rudloff
9921b6210f Merge tag '3.0.0-beta5' into develop 
Composer 2 compatibility
Updated youtube-dl to 2020.11.12
Make sure locale is always set, even on first request
 2020-12-17 20:07:44 +01:00
Pierre Rudloff
c9aa41d206 Merge branch 'release-3.0.0-beta5' 2020-12-17 20:06:09 +01:00
Éric Gaspar
a5bda1d35e
Fix small typos (#333) 
* Fix small typos

- *Fix cap on YouTube, AllTube...*

* Fix YouTube cap
 2020-12-05 15:00:46 +01:00
Pierre Rudloff
f2bef49ad6 fixup! Make sure locale is always set, even on first request 2020-11-21 14:38:37 +01:00
Pierre Rudloff
f184bda59b Make sure locale is always set, even on first request 2020-11-21 14:20:01 +01:00
Pierre Rudloff
05959b17f0 Upgrade grumphp to 1.1 
In order to improve output in CI
 2020-11-16 23:31:18 +01:00
Pierre Rudloff
b5a585443a fixup! The youtube-dl repository is back 2020-11-16 23:28:36 +01:00
Pierre Rudloff
81e42057f9 Upgrade composer-dangling-locked-deps to 0.2.1 
To fix Composer 2 compatibility
 2020-11-16 23:21:32 +01:00
Pierre Rudloff
a800a058fa The youtube-dl repository is back 2020-11-16 20:48:03 +01:00
Pierre Rudloff
2d1d69a1f1 Refactor some Robo code 2020-11-16 20:45:49 +01:00
Tripp Sanders
bd2b72721f
Remove an extra S (#328) 
* Remove an extra s

* Remove a few extra S’s
 2020-11-08 19:53:42 +01:00
Pierre Rudloff
c844d3bf74 Merge tag '3.0.0-beta4' into develop 
Fixed the CSP because it was breaking downloads on Chrome (#327)
Upgraded youtube-dl to 2020.11.01.1 (#326)
 2020-11-04 23:08:02 +01:00
Pierre Rudloff
f6d3a72c31 Merge branch 'release/3.0.0-beta4' 2020-11-04 23:05:51 +01:00
Pierre Rudloff
c0b2acf33e Don't restrict forms in CSP (#327) 2020-11-04 23:03:39 +01:00
Pierre Rudloff
17422d8485 Upgrade youtube-dl to 2020.11.01.1 (fixes #326) 2020-11-02 21:09:27 +01:00
Pierre Rudloff
b9c860f824 Merge branch 'master' into develop 2020-10-28 22:20:48 +01:00
Pierre Rudloff
f4a9528b56 Explicitely require PHP >= 7.3 2020-10-28 22:17:27 +01:00
Pierre Rudloff
02df3d219a Merge tag '3.0.0-beta3' into develop 
We now temporarily get youtube-dl from PyPI (because their GitHub repository is not available anymore)
Upgraded alltube-library to 0.1.1
The bookmarklet is now correctly generated when AllTube is behind a reverse proxy
The bookmarklet is now compatible with ugly URLs
 2020-10-28 21:58:44 +01:00