Kavita/API/Controllers
Joseph Milazzo 88b5ebeb69
Security Hotfix (#1415)
* Updated ngx-extended-pdf-viewer to 14.5.2 + misc security vuln

* Hooked up remove from want to read AND fixed a bug in the logic that was removing everything BUT what was passed.

Allow for bookmarks to have date info for better ordering.

* Implemented a quick way to set darkneses level on manga reader for when nightlight just isn't dark enough

* Added Japanese Series name support in the Parser

* Updated our security file with our Huntr.

* Fixed a security vulnerability where through the API, an unauthorized user could delete/modify reading lists that did not belong to them.

Fixed a bug where when creating a reading list with the name of another users, the API would throw an exception (but reading list would still get created)

* Ensure all reading list apis are authorized

* Ensured all APIs require authentication, except those that explicitly don't. All APIs are default requiring Authentication.

Fixed a security vulnerability which would allow a user to take over an admin account.

* Fixed a bug where cover-upload would accept filenames that were not expected.

* Explicitly check that a user has access to the pdf file before we serve it back.

* Enabled lock out when invalid user auth occurs. After 5 invalid auths, the user account will be locked out for 10 mins.
2022-08-08 13:47:37 -07:00
..
AccountController.cs Security Hotfix (#1415) 2022-08-08 13:47:37 -07:00
AdminController.cs Security Hotfix (#1415) 2022-08-08 13:47:37 -07:00
BaseApiController.cs Security Hotfix (#1415) 2022-08-08 13:47:37 -07:00
BookController.cs Misc Bugfixes (#1378) 2022-07-17 07:19:36 -07:00
CollectionController.cs Fixes, Tweaks, and Series Filtering (#1217) 2022-04-14 14:55:06 -07:00
DownloadController.cs Better Caching & Global Downloads (#1372) 2022-07-13 07:45:14 -07:00
FallbackController.cs Security Hotfix (#1415) 2022-08-08 13:47:37 -07:00
ImageController.cs Security Hotfix (#1415) 2022-08-08 13:47:37 -07:00
LibraryController.cs Swagger, Tachiyomi, and some new settings (#1331) 2022-06-25 15:52:21 -07:00
MetadataController.cs Infinite Scroll + List View + Cover Upload Redesign (#1319) 2022-06-13 14:37:49 -07:00
OPDSController.cs Security Hotfix (#1415) 2022-08-08 13:47:37 -07:00
PluginController.cs Fixes filter application (#992) 2022-01-26 15:54:35 -08:00
ReaderController.cs Security Hotfix (#1415) 2022-08-08 13:47:37 -07:00
ReadingListController.cs Security Hotfix (#1415) 2022-08-08 13:47:37 -07:00
RecommendedController.cs Infinite Scroll + List View + Cover Upload Redesign (#1319) 2022-06-13 14:37:49 -07:00
SeriesController.cs Better Caching & Global Downloads (#1372) 2022-07-13 07:45:14 -07:00
ServerController.cs Better Caching & Global Downloads (#1372) 2022-07-13 07:45:14 -07:00
SettingsController.cs All Around Polish (#1328) 2022-06-22 10:25:52 -07:00
TachiyomiController.cs Swagger, Tachiyomi, and some new settings (#1331) 2022-06-25 15:52:21 -07:00
ThemeController.cs Security Hotfix (#1415) 2022-08-08 13:47:37 -07:00
UploadController.cs Security Hotfix (#1415) 2022-08-08 13:47:37 -07:00
UsersController.cs Want to Read List (#1392) 2022-07-28 15:18:35 -07:00
WantToReadController.cs Security Hotfix (#1415) 2022-08-08 13:47:37 -07:00