Kavita/API
Joseph Milazzo 88b5ebeb69
Security Hotfix (#1415)
* Updated ngx-extended-pdf-viewer to 14.5.2 + misc security vuln

* Hooked up remove from want to read AND fixed a bug in the logic that was removing everything BUT what was passed.

Allow for bookmarks to have date info for better ordering.

* Implemented a quick way to set darkneses level on manga reader for when nightlight just isn't dark enough

* Added Japanese Series name support in the Parser

* Updated our security file with our Huntr.

* Fixed a security vulnerability where through the API, an unauthorized user could delete/modify reading lists that did not belong to them.

Fixed a bug where when creating a reading list with the name of another users, the API would throw an exception (but reading list would still get created)

* Ensure all reading list apis are authorized

* Ensured all APIs require authentication, except those that explicitly don't. All APIs are default requiring Authentication.

Fixed a security vulnerability which would allow a user to take over an admin account.

* Fixed a bug where cover-upload would accept filenames that were not expected.

* Explicitly check that a user has access to the pdf file before we serve it back.

* Enabled lock out when invalid user auth occurs. After 5 invalid auths, the user account will be locked out for 10 mins.
2022-08-08 13:47:37 -07:00
..
Archive Misc Bugfixes and Enhancements (#507) 2021-08-17 14:15:32 -07:00
Comparators v0.5.2 - UX Refresh, Custom Themes, Metadata Editing, and OPDS updates! (#1189) 2022-04-02 10:11:07 -07:00
config Bugfix/reader issues (#1311) 2022-06-07 16:48:25 -07:00
Constants Shakeout Testing Part 1 (#1052) 2022-02-09 16:59:14 -08:00
Controllers Security Hotfix (#1415) 2022-08-08 13:47:37 -07:00
Data Security Hotfix (#1415) 2022-08-08 13:47:37 -07:00
DTOs Want to Read List (#1392) 2022-07-28 15:18:35 -07:00
Entities Security Hotfix (#1415) 2022-08-08 13:47:37 -07:00
Errors Validate Download Claim (#971) 2022-01-20 07:46:59 -08:00
Extensions Security Hotfix (#1415) 2022-08-08 13:47:37 -07:00
Helpers misc stuff to avoid scan loop (#1389) 2022-07-27 08:16:45 -07:00
Middleware Create Users Manually (Email still required) (#1381) 2022-07-17 08:43:03 -07:00
Parser Security Hotfix (#1415) 2022-08-08 13:47:37 -07:00
Properties Added new API for getting Member (aka Users but for use in FE). User is just used for login/registering. 2020-12-14 14:33:09 -06:00
Services Security Hotfix (#1415) 2022-08-08 13:47:37 -07:00
SignalR Better Caching & Global Downloads (#1372) 2022-07-13 07:45:14 -07:00
API.csproj Better Caching & Global Downloads (#1372) 2022-07-13 07:45:14 -07:00
API.csproj.DotSettings v0.5.0 Release (#960) 2022-01-18 15:31:34 -08:00
Program.cs v0.5.2 - UX Refresh, Custom Themes, Metadata Editing, and OPDS updates! (#1189) 2022-04-02 10:11:07 -07:00
Startup.cs Change Detection: On Push aka UI Smoothness (#1369) 2022-07-11 08:57:07 -07:00