Commit graph

30 commits

Author SHA1 Message Date
ac44c0e6cc
feat: embed base64 thumbnails in video objects
Embedded video thumbnails as base64 data URIs to enhance performance and ensure portability. Updated CSP to allow 'data:' sources for images, preventing CSP violations when rendering base64 images.

Addresses issues with missing thumbnails and enhances security settings.
2024-07-21 09:47:21 +02:00
Pierre Rudloff
71647158d3
Stronger typying now that we target PHP 7.4 2023-03-21 20:20:14 +01:00
Pierre Rudloff
113b3d5e50 Some videos have no format 2022-03-06 22:55:33 +01:00
Pierre Rudloff
363bf9b08c fixup! Prevent SSRF requests By validating the provided URL before passing it to youtube-dl 2022-02-27 23:36:51 +01:00
Pierre Rudloff
732baccd63 Make the watch route generate a full YouTube URL (fixes #402) 2022-02-27 23:32:08 +01:00
Pierre Rudloff
7f28275fb0 Merge tag '3.0.2' into develop
Fixed a SSRF vulnerability that could be used to send a request to an internal hostname
2022-02-27 12:34:23 +01:00
Pierre Rudloff
3a4f09dda0 Prevent SSRF requests
By validating the provided URL before passing it to youtube-dl
2022-02-27 11:00:33 +01:00
Pierre Rudloff
27439c7e14 Simplify overly complicated format selection template 2022-02-06 20:46:38 +01:00
Pierre Rudloff
b8c88aecf5 Improve typing 2022-02-03 20:52:18 +01:00
Pierre Rudloff
d46563f994 Simplify code 2022-02-03 20:21:04 +01:00
Pierre Rudloff
f2be3a7e5b Use relative paths on debug error page 2021-02-09 22:31:41 +01:00
Pierre Rudloff
bba5090ec3 We can't be sure of the class of the logger 2021-02-06 18:22:19 +01:00
Pierre Rudloff
05311ac7b6 Add return types 2020-12-17 22:49:21 +01:00
Éric Gaspar
a5bda1d35e
Fix small typos (#333)
* Fix small typos

- *Fix cap on YouTube, AllTube...*

* Fix YouTube cap
2020-12-05 15:00:46 +01:00
Pierre Rudloff
3d2b518cb4 Create a test container that we can use in any test 2020-10-22 22:48:47 +02:00
Pierre Rudloff
7d856c61fb Cleaner way to build the redirect 2020-10-22 01:13:25 +02:00
Pierre Rudloff
7dead957f0 Fix bookmarklet behind a reverse proxy 2020-10-22 00:45:41 +02:00
Pierre Rudloff
6bb577bcce Use default view variables 2020-10-22 00:45:09 +02:00
Pierre Rudloff
110bfc9ff1 Cleaner way to build the canonical URL 2020-10-22 00:28:36 +02:00
Pierre Rudloff
de8c5e5dc7 Convert SessionManager to a factory class 2020-10-21 22:48:05 +02:00
Pierre Rudloff
123a6c5ad9 Move middleware to a subfolder 2020-10-20 23:17:22 +02:00
Pierre Rudloff
561b6c8370 Make the CSP compatible with debug tools 2020-10-19 23:59:23 +02:00
Pierre Rudloff
234ecc2c6d Log handled exceptions 2020-10-18 13:20:06 +02:00
bellington3
83863bd66c
Provide config toggle to disable the 'convert seek' function (#311)
* Provide config toggle to disable the 'convert seek' function in the frontend

* Add convertSeek config option to config.example

* Only send from/to if convertSeek is activated
2020-10-17 14:14:36 +02:00
Pierre Rudloff
8d15fbdda2 Lint 2020-09-27 16:06:49 +02:00
Pierre Rudloff
b6b4dad2ec Custom 404 and 405 error pages 2020-07-15 23:17:23 +02:00
Pierre Rudloff
280618bb6b Use a factory to Config and LocaleManager (see #298) 2020-07-15 23:05:41 +02:00
Pierre Rudloff
96a75cbf14 Log youtube-dl and ffmpeg commands (fixes #297) 2020-07-15 22:52:38 +02:00
Pierre Rudloff
b02e255cb4 Avoid magic numbers 2020-07-05 11:22:55 +02:00
Pierre Rudloff
d127964eff Simplify PSR-4 autoload 2020-07-01 22:52:22 +02:00