Version bump v2.34.0

Translations update from Hosted Weblate

client/components/app/Appbar.vue

@@ -196,6 +196,7 @@ export default {
     requestBatchQuickEmbed() {
       const payload = {
         message: this.$strings.MessageConfirmQuickEmbed,
+        allowHtml: true,
         callback: (confirmed) => {
           if (confirmed) {
             this.$axios

client/components/modals/collections/AddCreateModal.vue

@@ -227,7 +227,7 @@ export default {
         .catch((error) => {
           console.error('Failed to create collection', error)
           var errMsg = error.response ? error.response.data || '' : ''
-          this.$toast.error(this.$strings.ToastCollectionCreateFailed + ': ' + errMsg)
+          this.$toast.error(errMsg)
           this.processing = false
         })
     }

client/components/modals/item/tabs/Schedule.vue

@@ -158,6 +158,8 @@ export default {
       this.isProcessing = true
       var updateResult = await this.$axios.$patch(`/api/items/${this.libraryItemId}/media`, updatePayload).catch((error) => {
         console.error('Failed to update', error)
+        const errorMessage = typeof error?.response?.data === 'string' ? error?.response?.data : null
+        this.$toast.error(errorMessage || this.$strings.ToastFailedToUpdate)
         return false
       })
       this.isProcessing = false

client/components/modals/item/tabs/Tools.vue

@@ -107,6 +107,7 @@ export default {
     quickEmbed() {
       const payload = {
         message: this.$strings.MessageConfirmQuickEmbed,
+        allowHtml: true,
         callback: (confirmed) => {
           if (confirmed) {
             this.$axios

client/components/prompt/Confirm.vue

@@ -3,7 +3,8 @@
     <div class="absolute top-0 left-0 right-0 w-full h-36 bg-linear-to-t from-transparent via-black-500 to-black-700 opacity-90 pointer-events-none" />
     <div ref="content" class="relative text-white" :style="{ height: modalHeight, width: modalWidth }" v-click-outside="clickedOutside">
       <div class="px-4 w-full text-sm py-6 rounded-lg bg-bg shadow-lg border border-black-300">
-        <p id="confirm-prompt-message" class="text-lg mb-6 mt-2 px-1" v-html="message" />
+        <p v-if="allowHtmlMessage" id="confirm-prompt-message" class="text-lg mb-6 mt-2 px-1" v-html="sanitizedMessage" />
+        <p v-else id="confirm-prompt-message" class="text-lg mb-6 mt-2 px-1">{{ message }}</p>
 
         <ui-checkbox v-if="checkboxLabel" v-model="checkboxValue" checkbox-bg="bg" :label="checkboxLabel" label-class="pl-2 text-base" class="mb-6 px-1" />
 
@@ -52,6 +53,17 @@ export default {
     message() {
       return this.confirmPromptOptions.message || ''
     },
+    allowHtmlMessage() {
+      return !!this.confirmPromptOptions.allowHtml
+    },
+    sanitizedMessage() {
+      if (!this.allowHtmlMessage) return this.message
+
+      return this.escapeHtml(this.message)
+        .replace(/&lt;br\s*\/?&gt;/gi, '<br>')
+        .replace(/&lt;code&gt;/gi, '<code>')
+        .replace(/&lt;\/code&gt;/gi, '</code>')
+    },
     callback() {
       return this.confirmPromptOptions.callback
     },
@@ -103,6 +115,14 @@ export default {
       if (this.callback) this.callback(true, this.checkboxValue)
       this.show = false
     },
+    escapeHtml(value) {
+      return String(value)
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&#39;')
+    },
     setShow() {
       this.checkboxValue = this.checkboxDefaultValue
       this.$eventBus.$emit('showing-prompt', true)

client/components/ui/TextInput.vue

@@ -1,6 +1,6 @@
 <template>
   <div ref="wrapper" class="relative">
-    <input :id="inputId" :name="inputName" ref="input" v-model="inputValue" :type="actualType" :step="step" :min="min" :readonly="readonly" :disabled="disabled" :placeholder="placeholder" dir="auto" class="rounded-sm bg-primary text-gray-200 focus:bg-bg focus:outline-hidden border h-full w-full" :class="classList" @keyup="keyup" @change="change" @focus="focused" @blur="blurred" />
+    <input :id="inputId" :name="inputName" ref="input" v-model="inputValue" :type="actualType" :step="step" :min="min" :readonly="readonly" :disabled="disabled" :placeholder="placeholder" :autocomplete="autocomplete" dir="auto" class="rounded-sm bg-primary text-gray-200 focus:bg-bg focus:outline-hidden border h-full w-full" :class="classList" @keyup="keyup" @change="change" @focus="focused" @blur="blurred" />
     <div v-if="clearable && inputValue" class="absolute top-0 right-0 h-full px-2 flex items-center justify-center">
       <span class="material-symbols text-gray-300 cursor-pointer" style="font-size: 1.1rem" @click.stop.prevent="clear">close</span>
     </div>
@@ -41,7 +41,8 @@ export default {
     step: [String, Number],
     min: [String, Number],
     customInputClass: String,
-    trimWhitespace: Boolean
+    trimWhitespace: Boolean,
+    autocomplete: String
   },
   data() {
     return {

client/components/ui/TextInputWithLabel.vue

@@ -6,7 +6,7 @@
         <em v-if="note" class="font-normal text-xs pl-2">{{ note }}</em>
       </label>
     </slot>
-    <ui-text-input :placeholder="placeholder || label" :inputId="identifier" ref="input" v-model="inputValue" :disabled="disabled" :readonly="readonly" :type="type" :min="min" :show-copy="showCopy" class="w-full" :class="inputClass" :trim-whitespace="trimWhitespace" @blur="inputBlurred" />
+    <ui-text-input :placeholder="placeholder || label" :inputId="identifier" ref="input" v-model="inputValue" :disabled="disabled" :readonly="readonly" :type="type" :min="min" :show-copy="showCopy" :autocomplete="autocomplete" class="w-full" :class="inputClass" :trim-whitespace="trimWhitespace" @blur="inputBlurred" />
   </div>
 </template>
 
@@ -26,7 +26,8 @@ export default {
     disabled: Boolean,
     inputClass: String,
     showCopy: Boolean,
-    trimWhitespace: Boolean
+    trimWhitespace: Boolean,
+    autocomplete: String
   },
   data() {
     return {}

client/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "audiobookshelf-client",
-  "version": "2.33.0",
+  "version": "2.34.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "audiobookshelf-client",
-      "version": "2.33.0",
+      "version": "2.34.0",
       "license": "ISC",
       "dependencies": {
         "@nuxtjs/axios": "^5.13.6",

client/package.json

@@ -1,6 +1,6 @@
 {
   "name": "audiobookshelf-client",
-  "version": "2.33.0",
+  "version": "2.34.0",
   "buildNumber": 1,
   "description": "Self-hosted audiobook and podcast client",
   "main": "index.js",

client/pages/config/index.vue

@@ -390,8 +390,8 @@ export default {
     },
     purgeItemsCache() {
       const payload = {
-        // message: `This will delete the entire folder at <code>/metadata/cache/items</code>.<br />Are you sure you want to purge items cache?`,
         message: this.$strings.MessageConfirmPurgeItemsCache,
+        allowHtml: true,
         callback: (confirmed) => {
           if (confirmed) {
             this.sendPurgeItemsCache()

client/pages/config/item-metadata-utils/genres.vue

@@ -90,9 +90,9 @@ export default {
 
       let message = this.$getString('MessageConfirmRenameGenre', [this.editingGenre, this.newGenreName])
       if (genreNameExists) {
-        message += `<br><span class="text-sm">${this.$strings.MessageConfirmRenameGenreMergeNote}</span>`
+        message += ` ${this.$strings.MessageConfirmRenameGenreMergeNote}`
       } else if (genreNameExistsOfDifferentCase) {
-        message += `<br><span class="text-warning text-sm">${this.$getString('MessageConfirmRenameGenreWarning', [genreNameExistsOfDifferentCase])}</span>`
+        message += ` ${this.$getString('MessageConfirmRenameGenreWarning', [genreNameExistsOfDifferentCase])}`
       }
 
       const payload = {

client/pages/config/item-metadata-utils/tags.vue

@@ -86,9 +86,9 @@ export default {
 
       let message = this.$getString('MessageConfirmRenameTag', [this.editingTag, this.newTagName])
       if (tagNameExists) {
-        message += `<br><span class="text-sm">${this.$strings.MessageConfirmRenameTagMergeNote}</span>`
+        message += ` ${this.$strings.MessageConfirmRenameTagMergeNote}`
       } else if (tagNameExistsOfDifferentCase) {
-        message += `<br><span class="text-warning text-sm">${this.$getString('MessageConfirmRenameTagWarning', [tagNameExistsOfDifferentCase])}</span>`
+        message += ` ${this.$getString('MessageConfirmRenameTagWarning', [tagNameExistsOfDifferentCase])}`
       }
 
       const payload = {

client/pages/login.vue

@@ -17,9 +17,9 @@
 
         <form @submit.prevent="submitServerSetup">
           <p class="text-lg font-semibold mb-2 pl-1 text-center">Create Root User</p>
-          <ui-text-input-with-label v-model.trim="newRoot.username" label="Username" :disabled="processing" class="w-full mb-3 text-sm" />
-          <ui-text-input-with-label v-model="newRoot.password" label="Password" type="password" :disabled="processing" class="w-full mb-3 text-sm" />
-          <ui-text-input-with-label v-model="confirmPassword" label="Confirm Password" type="password" :disabled="processing" class="w-full mb-3 text-sm" />
+          <ui-text-input-with-label v-model.trim="newRoot.username" label="Username" autocomplete="username" :disabled="processing" class="w-full mb-3 text-sm" />
+          <ui-text-input-with-label v-model="newRoot.password" label="Password" type="password" autocomplete="new-password" :disabled="processing" class="w-full mb-3 text-sm" />
+          <ui-text-input-with-label v-model="confirmPassword" label="Confirm Password" type="password" autocomplete="new-password" :disabled="processing" class="w-full mb-3 text-sm" />
 
           <p class="text-lg font-semibold mt-6 mb-2 pl-1 text-center">Directory Paths</p>
           <ui-text-input-with-label v-model="ConfigPath" label="Config Path" disabled class="w-full mb-3 text-sm" />
@@ -51,10 +51,10 @@
 
           <form v-show="login_local" @submit.prevent="submitForm">
             <label class="text-xs text-gray-300 uppercase">{{ $strings.LabelUsername }}</label>
-            <ui-text-input v-model.trim="username" :disabled="processing" class="mb-3 w-full" inputName="username" />
+            <ui-text-input v-model.trim="username" autocomplete="username" :disabled="processing" class="mb-3 w-full" inputName="username" />
 
             <label class="text-xs text-gray-300 uppercase">{{ $strings.LabelPassword }}</label>
-            <ui-text-input v-model.trim="password" type="password" :disabled="processing" class="w-full mb-3" inputName="password" />
+            <ui-text-input v-model.trim="password" type="password" autocomplete="current-password" :disabled="processing" class="w-full mb-3" inputName="password" />
             <div class="w-full flex justify-end py-3">
               <ui-btn type="submit" :disabled="processing" color="bg-primary" class="leading-none">{{ processing ? 'Checking...' : $strings.ButtonSubmit }}</ui-btn>
             </div>

client/pages/share/_slug.vue

@@ -364,6 +364,7 @@ export default {
     }
 
     const startTime = this.playbackSession.currentTime || 0
+
     this.localAudioPlayer.set(null, this.audioTracks, false, startTime, false)
     this.localAudioPlayer.on('stateChange', this.playerStateChange.bind(this))
     this.localAudioPlayer.on('timeupdate', this.playerTimeUpdate.bind(this))

client/players/LocalAudioPlayer.js

@@ -46,7 +46,20 @@ export default class LocalAudioPlayer extends EventEmitter {
     this.player.addEventListener('loadedmetadata', this.evtLoadedMetadata.bind(this))
     this.player.addEventListener('timeupdate', this.evtTimeupdate.bind(this))
 
-    var mimeTypes = ['audio/flac', 'audio/mpeg', 'audio/mp4', 'audio/ogg', 'audio/aac', 'audio/x-ms-wma', 'audio/x-aiff', 'audio/webm']
+    var mimeTypes = [
+      'audio/flac',
+      'audio/mpeg',
+      'audio/mp4',
+      'audio/ogg',
+      'audio/aac',
+      'audio/x-ms-wma',
+      'audio/x-aiff',
+      'audio/webm',
+      // `audio/matroska` is the correct mimetype, but the server still uses `audio/x-matroska`
+      // ref: https://www.iana.org/assignments/media-types/media-types.xhtml
+      'audio/matroska',
+      'audio/x-matroska'
+    ]
     var mimeTypeCanPlayMap = {}
     mimeTypes.forEach((mt) => {
       var canPlay = this.player.canPlayType(mt)

client/plugins/i18n.js

@@ -21,6 +21,7 @@ const languageCodeMap = {
   he: { label: 'עברית', dateFnsLocale: 'he' },
   hr: { label: 'Hrvatski', dateFnsLocale: 'hr' },
   it: { label: 'Italiano', dateFnsLocale: 'it' },
+  ja: { label: '日本語', dateFnsLocale: 'ja' },
   lt: { label: 'Lietuvių', dateFnsLocale: 'lt' },
   hu: { label: 'Magyar', dateFnsLocale: 'hu' },
   ko: { label: '한국어', dateFnsLocale: 'ko' },
@@ -60,6 +61,7 @@ const podcastSearchRegionMap = {
   hr: { label: 'Hrvatska' },
   il: { label: 'ישראל / إسرائيل' },
   it: { label: 'Italia' },
+  jp: { label: '日本' },
   lu: { label: 'Luxembourg / Luxemburg / Lëtezebuerg' },
   hu: { label: 'Magyarország' },
   nl: { label: 'Nederland' },

client/strings/be.json

@@ -1,6 +1,6 @@
 {
   "ButtonAdd": "Дадаць",
-  "ButtonAddApiKey": "Дадаць API-ключ",
+  "ButtonAddApiKey": "Дадаць ключ API",
   "ButtonAddChapters": "Дадаць раздзелы",
   "ButtonAddDevice": "Дадаць прыладу",
   "ButtonAddLibrary": "Дадаць бібліятэку",
@@ -16,7 +16,7 @@
   "ButtonBrowseForFolder": "Агляд папак",
   "ButtonCancel": "Скасаваць",
   "ButtonCancelEncode": "Скасаваць кадзіраванне",
-  "ButtonChangeRootPassword": "Зменіце Root пароль",
+  "ButtonChangeRootPassword": "Змяніць пароль root",
   "ButtonCheckAndDownloadNewEpisodes": "Праверыць і спампаваць новыя выпускі",
   "ButtonChooseAFolder": "Выбраць папку",
   "ButtonChooseFiles": "Выбраць файлы",
@@ -50,7 +50,7 @@
   "ButtonManageTracks": "Кіраванне трэкамі",
   "ButtonMapChapterTitles": "Супаставіць загалоўкі раздзелаў",
   "ButtonMatchAllAuthors": "Супадзенне ўсіх аўтараў",
-  "ButtonMatchBooks": "Падбор кніг",
+  "ButtonMatchBooks": "Параўнаць кнігі",
   "ButtonNevermind": "Няважна",
   "ButtonNext": "Далей",
   "ButtonNextChapter": "Наступны раздзел",
@@ -81,7 +81,7 @@
   "ButtonRemove": "Выдаліць",
   "ButtonRemoveAll": "Выдаліць усе",
   "ButtonRemoveAllLibraryItems": "Выдаліць усе элементы бібліятэкі",
-  "ButtonRemoveFromContinueListening": "Выдаліць з Працягваць слухаць",
+  "ButtonRemoveFromContinueListening": "Выдаліць з Працяг праслухоўвання",
   "ButtonRemoveFromContinueReading": "Выдаліць з Працягваць чытанне",
   "ButtonRemoveSeriesFromContinueSeries": "Выдаліць серыю з Працягваць серыю",
   "ButtonReset": "Скінуць",
@@ -107,10 +107,10 @@
   "ButtonSubmit": "Адправіць",
   "ButtonTest": "Тэст",
   "ButtonUnlinkOpenId": "Адвязаць OpenID",
-  "ButtonUpload": "Загрузіць",
-  "ButtonUploadBackup": "Загрузіць рэзервовую копію",
-  "ButtonUploadCover": "Загрузіць вокладку",
-  "ButtonUploadOPMLFile": "Загрузіць файл OPML",
+  "ButtonUpload": "Запампаваць",
+  "ButtonUploadBackup": "Запампаваць рэзервовую копію",
+  "ButtonUploadCover": "Запампаваць вокладку",
+  "ButtonUploadOPMLFile": "Запампаваць файл OPML",
   "ButtonUserDelete": "Выдаліць карыстальніка {0}",
   "ButtonUserEdit": "Рэдагаваць карыстальніка {0}",
   "ButtonViewAll": "Прагледзець усе",
@@ -121,7 +121,7 @@
   "HeaderAccount": "Уліковы запіс",
   "HeaderAddCustomMetadataProvider": "Дадаванне карыстальніцкага пастаўшчыка метаданых",
   "HeaderAdvanced": "Дадаткова",
-  "HeaderApiKeys": "API-ключы",
+  "HeaderApiKeys": "Ключы API",
   "HeaderAppriseNotificationSettings": "Налады апавяшчэнняў Apprise",
   "HeaderAudioTracks": "Аўдыятрэкі",
   "HeaderAudiobookTools": "Сродкі кіравання файламі аўдыякніг",
@@ -149,7 +149,7 @@
   "HeaderFindChapters": "Знайсці раздзелы",
   "HeaderIgnoredFiles": "Ігнараваныя файлы",
   "HeaderItemFiles": "Файлы элементаў",
-  "HeaderItemMetadataUtils": "Утыліты для метаданых элементаў",
+  "HeaderItemMetadataUtils": "Утыліты для метаданых",
   "HeaderLastListeningSession": "Апошні сеанс праслухоўвання",
   "HeaderLatestEpisodes": "Апошнія выпускі",
   "HeaderLibraries": "Бібліятэкі",
@@ -166,7 +166,7 @@
   "HeaderMetadataOrderOfPrecedence": "Парадак прыярытэту метаданых",
   "HeaderMetadataToEmbed": "Метаданыя для ўбудавання",
   "HeaderNewAccount": "Новы ўліковы запіс",
-  "HeaderNewApiKey": "Новы API-ключ",
+  "HeaderNewApiKey": "Новы ключ API",
   "HeaderNewLibrary": "Новая бібліятэка",
   "HeaderNotificationCreate": "Стварыць апавяшчэнне",
   "HeaderNotificationUpdate": "Абнавіць апавяшчэнне",
@@ -196,7 +196,7 @@
   "HeaderSession": "Сеанс",
   "HeaderSetBackupSchedule": "Наладзіць расклад рэзервовага капіравання",
   "HeaderSettings": "Налады",
-  "HeaderSettingsDisplay": "Дысплей",
+  "HeaderSettingsDisplay": "Выгляд",
   "HeaderSettingsExperimental": "Эксперыментальныя функцыі",
   "HeaderSettingsGeneral": "Агульныя",
   "HeaderSettingsScanner": "Сканер",
@@ -207,12 +207,12 @@
   "HeaderStatsLongestItems": "Найдаўжэйшыя элементы (гадзіны)",
   "HeaderStatsMinutesListeningChart": "Хвілін праслухоўвання (апошнія 7 дзён)",
   "HeaderStatsRecentSessions": "Апошнія сеансы",
-  "HeaderStatsTop10Authors": "10 лепшых аўтараў",
-  "HeaderStatsTop5Genres": "5 лепшых жанраў",
+  "HeaderStatsTop10Authors": "Топ 10 аўтараў",
+  "HeaderStatsTop5Genres": "Топ 5 жанраў",
   "HeaderTableOfContents": "Змест",
   "HeaderTools": "Інструменты",
   "HeaderUpdateAccount": "Абнавіць уліковы запіс",
-  "HeaderUpdateApiKey": "Абнавіць API-ключ",
+  "HeaderUpdateApiKey": "Абнавіць ключ API",
   "HeaderUpdateAuthor": "Абнавіць аўтара",
   "HeaderUpdateDetails": "Абнавіць падрабязнасці",
   "HeaderUpdateLibrary": "Абнавіць бібліятэку",
@@ -239,21 +239,21 @@
   "LabelAll": "Усе",
   "LabelAllEpisodesDownloaded": "Усе выпускі спампаваныя",
   "LabelAllUsers": "Усе карыстальнікі",
-  "LabelAllUsersExcludingGuests": "Усе карыстальнікі, акрамя гасцей",
-  "LabelAllUsersIncludingGuests": "Усе карыстальнікі, уключаючы гасцей",
+  "LabelAllUsersExcludingGuests": "Усіх карыстальнікаў, акрамя гасцей",
+  "LabelAllUsersIncludingGuests": "Усіх карыстальнікаў, уключаючы гасцей",
   "LabelAlreadyInYourLibrary": "Ужо ў вашай бібліятэцы",
-  "LabelApiKeyCreated": "API-ключ \"{0}\" паспяхова створаны.",
-  "LabelApiKeyCreatedDescription": "Пераканайцеся, што вы скапіявалі API-ключ зараз, бо паўторна яго ўбачыць не атрымаецца.",
+  "LabelApiKeyCreated": "Ключ API \"{0}\" паспяхова створаны.",
+  "LabelApiKeyCreatedDescription": "Абавязкова скапіюйце ключ API зараз, бо паўторна яго ўбачыць не атрымаецца.",
   "LabelApiKeyUser": "Дзейнічаць ад імя карыстальніка",
-  "LabelApiKeyUserDescription": "Гэты API-ключ будзе мець тыя ж правы, што і карыстальнік, ад імя якога ён дзейнічае. У журналах гэта будзе выглядаць так, быццам запыт робіць сам карыстальнік.",
+  "LabelApiKeyUserDescription": "Гэты ключ API будзе мець тыя ж правы, што і карыстальнік, ад імя якога ён дзейнічае. У журналах гэта будзе выглядаць так, быццам запыт робіць сам карыстальнік.",
   "LabelApiToken": "Токен API",
   "LabelAppend": "Дадаць",
   "LabelAudioBitrate": "Бітрэйт аўдыя (напрыклад, 128к)",
   "LabelAudioChannels": "Аўдыяканалы (1 або 2)",
   "LabelAudioCodec": "Аўдыякодэк",
   "LabelAuthor": "Аўтар",
-  "LabelAuthorFirstLast": "Аўтар (Імя Прозвішча)",
-  "LabelAuthorLastFirst": "Аўтар (Прозвішча, Імя)",
+  "LabelAuthorFirstLast": "Аўтар (імя, прозвішча)",
+  "LabelAuthorLastFirst": "Аўтар (прозвішча, імя)",
   "LabelAuthors": "Аўтары",
   "LabelAutoDownloadEpisodes": "Аўтаматычна спампоўваць выпускі",
   "LabelAutoFetchMetadata": "Аўтаматычнае атрыманне метаданых",
@@ -264,7 +264,7 @@
   "LabelAutoRegisterDescription": "Аўтаматычна ствараць новых карыстальнікаў пасля ўваходу ў сістэму",
   "LabelBackToUser": "Вярнуцца да карыстальніка",
   "LabelBackupAudioFiles": "Рэзервовае капіраванне аўдыяфайлаў",
-  "LabelBackupLocation": "Месцазнаходжанне рэзервовых копій",
+  "LabelBackupLocation": "Размяшчэнне рэзервовых копій",
   "LabelBackupsEnableAutomaticBackups": "Аўтаматычнае рэзервовае капіраванне",
   "LabelBackupsEnableAutomaticBackupsHelp": "Рэзервовыя копіі захаваныя ў /metadata/backups",
   "LabelBackupsMaxBackupSize": "Максімальны памер рэзервовай копіі (у ГБ) (0 — неабмежавана)",
@@ -292,7 +292,7 @@
   "LabelCollections": "Калекцыі",
   "LabelComplete": "Завяршыць",
   "LabelConfirmPassword": "Пацвердзіце пароль",
-  "LabelContinueListening": "Працягваць слухаць",
+  "LabelContinueListening": "Працяг праслухоўвання",
   "LabelContinueReading": "Працягнуць чытанне",
   "LabelContinueSeries": "Працягнуць серыі",
   "LabelCorsAllowed": "Дазволеныя крыніцы CORS",
@@ -316,7 +316,7 @@
   "LabelDirectory": "Каталог",
   "LabelDiscFromFilename": "Дыск з файла",
   "LabelDiscFromMetadata": "Дыск з метаданых",
-  "LabelDiscover": "Знайсці",
+  "LabelDiscover": "Знаходкі",
   "LabelDownload": "Спампаваць",
   "LabelDownloadNEpisodes": "Спампавана {0} выпускаў",
   "LabelDownloadable": "Спампоўваецца",
@@ -332,7 +332,7 @@
   "LabelEmailSettingsFromAddress": "Адрас адпраўніка",
   "LabelEmailSettingsRejectUnauthorized": "Адхіляць неаўтарызаваныя сертыфікаты",
   "LabelEmailSettingsRejectUnauthorizedHelp": "Адключэнне праверкі SSL-сертыфіката можа зрабіць ваша злучэнне ўразлівым перад пагрозамі бяспекі, такімі як атакі \"чалавек пасярэдзіне\". Адключайце гэтую опцыю толькі калі цалкам разумееце наступствы і ўпэўнены ў надзейнасці паштовага сервера.",
-  "LabelEmailSettingsSecure": "Бяспечныя",
+  "LabelEmailSettingsSecure": "Бяспечна",
   "LabelEmailSettingsSecureHelp": "Калі ўключана, злучэнне будзе выкарыстоўваць TLS пры падключэнні да сервера. Калі выключана, TLS будзе выкарыстоўвацца толькі ў выпадку падтрымкі пашырэння STARTTLS на серверы. У большасці выпадкаў усталюйце значэнне true пры падключэнні да порта 465. Для партоў 587 або 25 не ўключайце яго. (інфармацыя з nodemailer.com/smtp/#authentication)",
   "LabelEmailSettingsTestAddress": "Тэставы адрас",
   "LabelEmbeddedCover": "Убудаваная вокладка",
@@ -424,7 +424,7 @@
   "LabelLastBookAdded": "Апошняя дададзеная кніга",
   "LabelLastBookUpdated": "Апошняя абноўленая кніга",
   "LabelLastProgressDate": "Апошні прагрэс: {0}",
-  "LabelLastSeen": "Апошні прагляд",
+  "LabelLastSeen": "Апошняя актыўнасць",
   "LabelLastTime": "Апошні раз",
   "LabelLastUpdate": "Апошняе абнаўленне",
   "LabelLayout": "Знешні выгляд",
@@ -545,7 +545,7 @@
   "LabelRSSFeedSlug": "Ідэнтыфікатар RSS-стужкі",
   "LabelRSSFeedURL": "URL RSS-стужкі",
   "LabelRandomly": "Выпадкова",
-  "LabelReAddSeriesToContinueListening": "Дадаць серыю зноў у Працягваць слухаць",
+  "LabelReAddSeriesToContinueListening": "Дадаць серыю зноў у Працяг праслухоўвання",
   "LabelRead": "Чытаць",
   "LabelReadAgain": "Чытаць зноў",
   "LabelReadEbookWithoutProgress": "Чытаць электронную кнігу без захавання прагрэсу",
@@ -588,23 +588,23 @@
   "LabelSettingsBookshelfViewHelp": "Рэалістычны дызайн з драўлянымі паліцамі",
   "LabelSettingsChromecastSupport": "Падтрымка Chromecast",
   "LabelSettingsDateFormat": "Фарматы даты",
-  "LabelSettingsEnableWatcher": "Аўтаматычна сачыць за зменамі ў бібліятэцках",
+  "LabelSettingsEnableWatcher": "Аўтаматычна сачыць за зменамі ў бібліятэках",
   "LabelSettingsEnableWatcherForLibrary": "Аўтаматычна сачыць за зменамі ў бібліятэцы",
   "LabelSettingsEnableWatcherHelp": "Адключае аўтаматычнае дадаванне/абнаўленне элементаў пры выяўленні змен у файлах. *Патрабуецца перазапуск сервера",
   "LabelSettingsEpubsAllowScriptedContent": "Дазваляць скрыпты ў файлах EPUB",
   "LabelSettingsEpubsAllowScriptedContentHelp": "Дазволіць файлам EPUB выконваць скрыпты. Рэкамендуецца пакінуць гэтую наладу выключанай, калі вы не давяраеце крыніцы файлаў EPUB.",
   "LabelSettingsExperimentalFeatures": "Эксперыментальныя функцыі",
   "LabelSettingsExperimentalFeaturesHelp": "Функцыі ў распрацоўцы, для якіх вашы водгукі і дапамога ў тэставанні будуць карыснымі. Націсніце, каб адкрыць абмеркаванне на GitHub.",
-  "LabelSettingsFindCovers": "Знайсці вокладкі",
+  "LabelSettingsFindCovers": "Шукаць вокладкі",
   "LabelSettingsFindCoversHelp": "Калі ў вашай аўдыякнізе няма ўбудаванай вокладкі або відарыса вокладкі ў папцы, сканер паспрабуе знайсці вокладку.<br>Заўвага: гэта павялічыць час сканіравання",
   "LabelSettingsHideSingleBookSeries": "Схаваць серыі з адной кнігай",
   "LabelSettingsHideSingleBookSeriesHelp": "Серыі, якія змяшчаюць толькі адну кнігу, будуць схаваны са старонкі серый і паліц на галоўнай старонцы.",
-  "LabelSettingsHomePageBookshelfView": "Галоўная старонка выкарыстоўвае выгляд кніжнай паліцы",
-  "LabelSettingsLibraryBookshelfView": "Бібліятэка выкарыстоўвае выгляд кніжнай паліцы",
+  "LabelSettingsHomePageBookshelfView": "Кніжныя паліцы на галоўнай старонцы",
+  "LabelSettingsLibraryBookshelfView": "Кніжныя паліцы ў бібліятэцы",
   "LabelSettingsLibraryMarkAsFinishedPercentComplete": "Працэнт завяршэння большы за",
-  "LabelSettingsLibraryMarkAsFinishedTimeRemaining": "Час, што застаўся, менш за (секунд)",
+  "LabelSettingsLibraryMarkAsFinishedTimeRemaining": "Час, што застаўся, меншы за (секунд)",
   "LabelSettingsLibraryMarkAsFinishedWhen": "Пазначыць элемент медыя як завершаны, калі",
-  "LabelSettingsOnlyShowLaterBooksInContinueSeries": "Пропусціць папярэднія кнігі ў \"Працягнуць серыю\"",
+  "LabelSettingsOnlyShowLaterBooksInContinueSeries": "Прапусціць папярэднія кнігі ў \"Працягнуць серыю\"",
   "LabelSettingsOnlyShowLaterBooksInContinueSeriesHelp": "Паліца \"Працягнуць серыю\" на галоўнай старонцы паказвае першую не пачатую кнігу ў серыях, дзе завершана хаця б адна кніга і няма кніг у працэсе чытання. Уключэнне гэтай налады дазволіць працягваць серыю з самай апошняй завершанай кнігі замест першай не пачатай.",
   "LabelSettingsParseSubtitles": "Аналізаваць падзагалоўкі",
   "LabelSettingsParseSubtitlesHelp": "Выдзяляць падзагаловак з назваў папак аўдыякніг.<br>Падзагаловак павінен быць аддзелены сімвалам \" - \".<br>Напрыклад, \"Назва кнігі - Падзагаловак тут\" мае падзагаловак \"Падзагаловак тут\"",
@@ -618,7 +618,7 @@
   "LabelSettingsSquareBookCoversHelp": "Аддаваць перавагу квадратным вокладкам замест стандартных вокладак з суадносінамі бакоў 1.6:1",
   "LabelSettingsStoreCoversWithItem": "Захоўваць вокладкі з элементам",
   "LabelSettingsStoreCoversWithItemHelp": "Прадвызначана вокладкі захоўваюцца ў /metadata/items, уключэнне гэтай опцыі забяспечыць захоўванне вокладак у папцы элемента бібліятэкі. Захоўвацца будзе толькі адзін файл з назвай \"cover\"",
-  "LabelSettingsStoreMetadataWithItem": "Захоўваць метаданыя разам з элементам",
+  "LabelSettingsStoreMetadataWithItem": "Захоўваць метаданыя з элементам",
   "LabelSettingsStoreMetadataWithItemHelp": "Прадвызначана метаданыя захоўваюцца ў /metadata/items. Пры ўключэнні гэтай опцыі файлаў метаданых будуць захоўвацца ў папках элементаў бібліятэкі",
   "LabelSettingsTimeFormat": "Фармат часу",
   "LabelShare": "Абагуліць",
@@ -634,14 +634,14 @@
   "LabelSortAscending": "Па ўзрастанні",
   "LabelSortDescending": "Па ўбыванні",
   "LabelSortPubDate": "Сартаваць па даце публікацыі",
-  "LabelStart": "Пачаць",
+  "LabelStart": "Пачатак",
   "LabelStartTime": "Час пачатку",
   "LabelStarted": "Пачата",
   "LabelStartedAt": "Пачата ў",
   "LabelStartedDate": "Пачата {0}",
   "LabelStatsAudioTracks": "Аўдыятрэкі",
-  "LabelStatsAuthors": "Аўтары",
-  "LabelStatsBestDay": "Лепшы дзень",
+  "LabelStatsAuthors": "Аўтараў",
+  "LabelStatsBestDay": "Найлепшы дзень",
   "LabelStatsDailyAverage": "У сярэднім за дзень",
   "LabelStatsDays": "Дзён",
   "LabelStatsDaysListened": "Дзён праслухана",
@@ -655,7 +655,7 @@
   "LabelStatsOverallHours": "Агульная колькасць гадзін",
   "LabelStatsWeekListening": "Праслухана за тыдзень",
   "LabelSubtitle": "Падзагаловак",
-  "LabelSupportedFileTypes": "Падтрымліваемыя тыпы файлаў",
+  "LabelSupportedFileTypes": "Падтрымліваюцца тыпы файлаў",
   "LabelTag": "Метка",
   "LabelTags": "Меткі",
   "LabelTagsAccessibleToUser": "Меткі, даступныя карыстальніку",
@@ -742,7 +742,7 @@
   "MessageAuthenticationSecurityMessage": "Дзеля бяспекі была палепшана аўтэнтыфікацыя. Усім карыстальнікам трэба паўторна ўвайсці ў сістэму.",
   "MessageBackupsDescription": "Рэзервовыя копіі ўключаюць карыстальнікаў, іх прагрэс, падрабязнасці элементаў бібліятэкі, налады сервера і відарысы, якія захоўваюцца ў <code>/metadata/items</code> і <code>/metadata/authors</code>. Рэзервовыя копіі <strong>не</strong> ўключаюць файлы, якія захоўваюцца ў папках бібліятэкі.",
   "MessageBackupsLocationEditNote": "Заўвага: Абнаўленне месцазнаходжання рэзервовых копій не перамяшчае і не змяняе існуючыя рэзервовыя копіі",
-  "MessageBackupsLocationNoEditNote": "Заўвага: Месцазнаходжанне рэзервовых копій задаецца праз зменную асяроддзя і не можа быць зменена тут.",
+  "MessageBackupsLocationNoEditNote": "Заўвага: Размяшчэнне рэзервовых копій задаецца праз зменную асяроддзя і не можа быць зменена тут.",
   "MessageBackupsLocationPathEmpty": "Шлях да месцазнаходжання рэзервовых копій не можа быць пустым",
   "MessageBatchEditPopulateMapDetailsAllHelp": "Запоўніце ўключаныя палі данымі з усіх элементаў. Палі з некалькімі значэннямі будуць аб'яднаны",
   "MessageBatchEditPopulateMapDetailsItemHelp": "Запоўніце ўключаныя палі падрабязнасцей карты данымі з гэтага элемента",
@@ -884,7 +884,7 @@
   "MessageRemoveEpisodes": "Выдаліць выпускі ({0})",
   "MessageRemoveFromPlayerQueue": "Выдаліць з чаргі прагравання",
   "MessageRemoveUserWarning": "Вы ўпэўнены, што хочаце назаўжды выдаліць карыстальніка \"{0}\"?",
-  "MessageReportBugsAndContribute": "Паведамляйце пра памылкі, прапануйце новыя функцыі і ўдзельнічайце на",
+  "MessageReportBugsAndContribute": "Паведамляйце пра памылкі, прапануйце функцыі і ўносьце свой уклад на",
   "MessageResetChaptersConfirm": "Вы ўпэўнены, што хочаце скінуць раздзелы і адрабіць зробленыя вамі змены?",
   "MessageRestoreBackupConfirm": "Вы ўпэўнены, што хочаце аднавіць рэзервовую копію, створаную",
   "MessageRestoreBackupWarning": "Аднаўленне рэзервовай копіі перазапіша ўсю базу даных, размешчаную ў /config, а таксама відарысы вокладкі ў /metadata/items і /metadata/authors. <br /><br /> Рэзервовыя копіі не змяняюць файлы ў папках бібліятэкі. Калі вы ўключылі налады сервера для захоўвання воклак і метаданых у папках бібліятэкі, гэтыя файлы не будуць захаваныя ў рэзервовых копіях і не зменяцца. <br /><br /> Усе кліенты, якія карыстаюцца вашым серверам, будуць аўтаматычна абноўлены.",
@@ -968,7 +968,7 @@
   "StatsBooksAdditional": "Некаторыя дапаўненні ўключаюць…",
   "StatsBooksFinished": "завершана кніг",
   "StatsBooksFinishedThisYear": "Некаторыя кнігі завершаны ў гэтым годзе…",
-  "StatsBooksListenedTo": "кнігі, якія былі праслуханы",
+  "StatsBooksListenedTo": "кніг праслухана",
   "StatsCollectionGrewTo": "Ваша калекцыя кніг павялічылася да…",
   "StatsSessions": "сеансаў",
   "StatsSpentListening": "праслухана",
@@ -1147,7 +1147,7 @@
   "ToastUnlinkOpenIdFailed": "Не ўдалося адвязаць карыстальніка ад OpenID",
   "ToastUnlinkOpenIdSuccess": "Карыстальнік адвязаны ад OpenID",
   "ToastUploaderFilepathExistsError": "Файл \"{0}\" ужо існуе на серверы",
-  "ToastUploaderItemExistsInSubdirectoryError": "Элемент \"{0}\" выкарыстоўвае падкаталог шляху загрузкі.",
+  "ToastUploaderItemExistsInSubdirectoryError": "Элемент \"{0}\" выкарыстоўвае падкаталог шляху запампоўкі.",
   "ToastUserDeleteFailed": "Не ўдалося выдаліць карыстальніка",
   "ToastUserDeleteSuccess": "Карыстальнік выдалены",
   "ToastUserPasswordChangeSuccess": "Пароль паспяхова зменены",

client/strings/bg.json

@@ -436,7 +436,7 @@
   "LabelLibraryFilterSublistEmpty": "Не {0}",
   "LabelLibraryItem": "Елемент на Библиотека",
   "LabelLibraryName": "Име на Библиотека",
-  "LabelLibrarySortByProgress": "Прогрес: Последно Обновен",
+  "LabelLibrarySortByProgress": "Прогрес: Последно обновление",
   "LabelLibrarySortByProgressFinished": "Прогрес: Приключено",
   "LabelLibrarySortByProgressStarted": "Прогрес: Започнато",
   "LabelLimit": "Лимит",
@@ -892,7 +892,7 @@
   "MessageScheduleRunEveryWeekdayAtTime": "Изпълни всеки {0} в {1}",
   "MessageSearchResultsFor": "Резултати от търсенето за",
   "MessageSelected": "{0} избрани",
-  "MessageSeriesSequenceCannotContainSpaces": "Подредбата в серия не може да съдържа шпации.",
+  "MessageSeriesSequenceCannotContainSpaces": "Подредбата в серия не може да съдържа шпации",
   "MessageServerCouldNotBeReached": "Сървърът не може да бъде достигнат",
   "MessageSetChaptersFromTracksDescription": "Задайте глави, като използвате всеки аудио файл като глава и заглавие на главата като име на аудио файла",
   "MessageShareExpirationWillBe": "Изтичането ще бъде на <strong>{0}</strong>",
@@ -956,6 +956,8 @@
   "NotificationOnEpisodeDownloadedDescription": "Изпълнява се при автоматично изтегляне на подкаст епизод",
   "NotificationOnRSSFeedDisabledDescription": "Изпълнява се, когато автоматичното изтегляне на епизодите е деактивирано, поради твърде много неуспешни опити",
   "NotificationOnRSSFeedFailedDescription": "Пуска се когато заявката за RSS фийд е неуспешна за автоматично сваляне на епизод",
+  "NotificationOnTestDescription": "Event за тестване на системата за нотификации",
+  "PlaceholderBulkChapterInput": "Въведете име на глава или използвайте номериране (прим. 'Епизод 1', 'Глава 10', '1.')",
   "PlaceholderNewCollection": "Ново име на колекцията",
   "PlaceholderNewFolderPath": "Нов път на папката",
   "PlaceholderNewPlaylist": "Ново име на плейлиста",
@@ -963,26 +965,58 @@
   "PlaceholderSearchEpisode": "Търсене на Епизоди...",
   "StatsAuthorsAdded": "добаврени автори",
   "StatsBooksAdded": "добавени книги",
+  "StatsBooksAdditional": "Някой от вкючените добавки…",
   "StatsBooksFinished": "завършени книги",
+  "StatsBooksFinishedThisYear": "Някой от книгите приключени тази година…",
+  "StatsBooksListenedTo": "слушани книги",
+  "StatsCollectionGrewTo": "Твоята книжна колекция израсна до…",
+  "StatsSessions": "сесии",
+  "StatsSpentListening": "прекарано в слушане",
+  "StatsTopAuthor": "ТОП АВТОР",
+  "StatsTopAuthors": "ТОП АВТОРИ",
+  "StatsTopGenre": "ТОП ЖАНР",
+  "StatsTopGenres": "ТОП ЖАНРА",
+  "StatsTopMonth": "ТОП МЕСЕЦ",
+  "StatsTopNarrator": "ТОП РАЗКАЗВАЧ",
+  "StatsTopNarrators": "ТОП РАЗКАЗВАЧИ",
+  "StatsTotalDuration": "С пълно времетраене…",
+  "StatsYearInReview": "ГОДИНАТА В ПРЕГЛЕД",
   "ToastAccountUpdateSuccess": "Успешно обновяване на акаунта",
+  "ToastAppriseUrlRequired": "Трябва да въведете Apprise URL",
+  "ToastAsinRequired": "ASIN-а е задължителен",
   "ToastAuthorImageRemoveSuccess": "Авторската снимка е премахната",
+  "ToastAuthorNotFound": "Автор \"{0}\" не е намерен",
+  "ToastAuthorRemoveSuccess": "Арторът е премахнат",
+  "ToastAuthorSearchNotFound": "Авторът не е намерен",
   "ToastAuthorUpdateMerged": "Обновяване на автора сливано",
   "ToastAuthorUpdateSuccess": "Автора обновен",
   "ToastAuthorUpdateSuccessNoImageFound": "Автор обновен (не е намерена снимка)",
+  "ToastBackupAppliedSuccess": "Архивът е приложен",
   "ToastBackupCreateFailed": "Неуспешно създаване на архив",
   "ToastBackupCreateSuccess": "Архивът е създаден",
   "ToastBackupDeleteFailed": "Неуспешно изтриване на архив",
   "ToastBackupDeleteSuccess": "Архивът е изтрит",
+  "ToastBackupInvalidMaxKeep": "Невалиден брой за архиви за запазване",
+  "ToastBackupInvalidMaxSize": "Невалиден максимален рамер на архив",
   "ToastBackupRestoreFailed": "Неуспешно възстановяване на архив",
   "ToastBackupUploadFailed": "Неуспешно качване на архив",
   "ToastBackupUploadSuccess": "Архивът е качен",
+  "ToastBatchApplyDetailsToItemsSuccess": "Детайли приложени на предмети",
+  "ToastBatchDeleteFailed": "Груповото изтриване се провали",
+  "ToastBatchDeleteSuccess": "Успешно групово изтриване",
+  "ToastBatchQuickMatchFailed": "Груповото Бързо Съвпадение се провали!",
+  "ToastBatchQuickMatchStarted": "Груповото Бързо Съвпадение на {0} книги започна!",
   "ToastBatchUpdateFailed": "Неуспешно групово актуализиране",
   "ToastBatchUpdateSuccess": "Успешно групово актуализиране",
   "ToastBookmarkCreateFailed": "Неуспешно създаване на отметка",
   "ToastBookmarkCreateSuccess": "Отметката е създадена",
   "ToastBookmarkRemoveSuccess": "Отметката е премахната",
+  "ToastBulkChapterInvalidCount": "Въведете число между 1 и 150",
   "ToastCachePurgeFailed": "Неуспешно изчистване на кеша",
   "ToastCachePurgeSuccess": "Успешно изчистване на кеша",
+  "ToastChapterLocked": "Главата е заключена.",
+  "ToastChapterStartTimeAdjusted": "Начално време на главате е настоено с {0} секунди",
+  "ToastChaptersAllLocked": "Всички глави са заключени. Оключете някой глави за да преместите техните времена.",
   "ToastChaptersHaveErrors": "Главите имат грешки",
   "ToastChaptersMustHaveTitles": "Главите трябва да имат заглавия",
   "ToastCollectionRemoveSuccess": "Колекцията е премахната",

client/strings/de.json

@@ -116,7 +116,7 @@
   "ButtonViewAll": "Alles anzeigen",
   "ButtonYes": "Ja",
   "ErrorUploadFetchMetadataAPI": "Fehler beim Abrufen der Metadaten",
-  "ErrorUploadFetchMetadataNoResults": "Metadaten konnten nicht abgerufen werden. Versuche, den Titel und/oder den Autor zu aktualisieren.",
+  "ErrorUploadFetchMetadataNoResults": "Metadaten konnten nicht abgerufen werden - versuche den Titel und/oder den Autor zu aktualisieren",
   "ErrorUploadLacksTitle": "Es muss ein Titel eingegeben werden",
   "HeaderAccount": "Konto",
   "HeaderAddCustomMetadataProvider": "Benutzerdefinierten Metadatenanbieter hinzufügen",
@@ -331,7 +331,7 @@
   "LabelEmail": "E-Mail",
   "LabelEmailSettingsFromAddress": "Sender",
   "LabelEmailSettingsRejectUnauthorized": "Nicht autorisierte Zertifikate ablehnen",
-  "LabelEmailSettingsRejectUnauthorizedHelp": "Durch das Deaktivieren der SSL-Zertifikatsüberprüfung kann deine Verbindung Sicherheitsrisiken wie Man-in-the-Middle-Angriffen ausgesetzt sein. Deaktiviere diese Option nur, wenn due die Auswirkungen verstehst und dem E-Mail-Server vertraust, mit dem eine Verbindung hergestellt wird.",
+  "LabelEmailSettingsRejectUnauthorizedHelp": "Durch das Deaktivieren der SSL-Zertifikatsüberprüfung kann deine Verbindung Sicherheitsrisiken wie Man-in-the-Middle-Angriffen ausgesetzt sein. Deaktiviere diese Option nur, wenn du die Auswirkungen verstehst und dem E-Mail-Server vertraust, mit dem eine Verbindung hergestellt wird.",
   "LabelEmailSettingsSecure": "Sicher",
   "LabelEmailSettingsSecureHelp": "Wenn an, verwendet die Verbindung TLS, wenn du eine Verbindung zum Server herstellst. Bei „aus“ wird TLS verwendet, wenn der Server die STARTTLS-Erweiterung unterstützt. In den meisten Fällen solltest du diesen Wert auf „an“ schalten, wenn du eine Verbindung zu Port 465 herstellst. Für Port 587 oder 25 behalte den Wert „aus“ bei. (von nodemailer.com/smtp/#authentication)",
   "LabelEmailSettingsTestAddress": "Test-Adresse",
@@ -622,7 +622,7 @@
   "LabelSettingsStoreMetadataWithItemHelp": "Standardmäßig werden die Metadaten in /metadata/items gespeichert. Wenn diese Option aktiviert ist, werden die Metadaten als OPF-Datei (Textdatei) in dem gleichen Ordner gespeichert in welchem sich auch das Medium befindet",
   "LabelSettingsTimeFormat": "Zeitformat",
   "LabelShare": "Freigeben",
-  "LabelShareDownloadableHelp": "Erlaubt es einem Nutzer, mit dem Link, die Dateien des Mediums als ZIP herunterzuladen.",
+  "LabelShareDownloadableHelp": "Erlaubt es einem Nutzer, mit dem Link die Dateien des Mediums als ZIP herunterzuladen.",
   "LabelShareOpen": "Freigeben",
   "LabelShareURL": "Freigabe URL",
   "LabelShowAll": "Alles anzeigen",
@@ -737,7 +737,7 @@
   "MessageAddToPlayerQueue": "Zur Abspielwarteliste hinzufügen",
   "MessageAppriseDescription": "Um diese Funktion nutzen zu können, musst du eine Instanz von <a href=\"https://github.com/caronc/apprise-api\" target=\"_blank\">Apprise API</a> laufen haben oder eine API verwenden welche dieselbe Anfragen bearbeiten kann. <br />Die Apprise API Url muss der vollständige URL-Pfad sein, an den die Benachrichtigung gesendet werden soll, z.B. wenn Ihre API-Instanz unter <code>http://192.168.1.1:8337</code> läuft, würdest du <code>http://192.168.1.1:8337/notify</code> eingeben.",
   "MessageAsinCheck": "Stelle sicher, dass die ASIN aus der richtigen Audible Region verwendet wird, nicht Amazon.",
-  "MessageAuthenticationLegacyTokenWarning": "Alte API-Token werden in Zukunft entfernt. Benutze stattdessen <a href=\"/config/api-keys\">API Keys</a>.",
+  "MessageAuthenticationLegacyTokenWarning": "Nicht mehr unterstützte API tokens werden in der Zukunft entfernt. Nutze stattdessen <a href=\"/config/api-keys\">API Schlüssel</a>.",
   "MessageAuthenticationOIDCChangesRestart": "Nach dem Speichern muss der Server neugestartet werden um die OIDC Änderungen zu übernehmen.",
   "MessageAuthenticationSecurityMessage": "Die Anmeldung wurde abgesichert. Benutzersitzungen werden getrennt, alle Benutzer müssen sich erneut anmelden.",
   "MessageBackupsDescription": "In einer Sicherung werden Benutzer, Benutzerfortschritte, Details zu den Bibliotheksobjekten, Servereinstellungen und Bilder welche in <code>/metadata/items</code> & <code>/metadata/authors</code> gespeichert sind gespeichert. Sicherungen enthalten keine Dateien welche in den einzelnen Bibliotheksordnern (Medien-Ordnern) gespeichert sind.",
@@ -816,7 +816,7 @@
   "MessageFeedURLWillBe": "Feed-URL wird {0} sein",
   "MessageFetching": "Wird abgerufen …",
   "MessageForceReScanDescription": "Durchsucht alle Dateien erneut, wie bei einem frischen Scan. ID3-Tags von Audiodateien, OPF-Dateien und Textdateien werden neu durchsucht.",
-  "MessageHeatmapListeningTimeTooltip": "<strong>{0} </strong> auf {1} gehört",
+  "MessageHeatmapListeningTimeTooltip": "<strong>{0} gehört</strong> auf {1}",
   "MessageHeatmapNoListeningSessions": "Keine Hörsitzungen am {0}",
   "MessageImportantNotice": "Wichtiger Hinweis!",
   "MessageInsertChapterBelow": "Kapitel unten einfügen",
@@ -1103,7 +1103,7 @@
   "ToastPodcastCreateFailed": "Podcast konnte nicht erstellt werden",
   "ToastPodcastCreateSuccess": "Podcast erstellt",
   "ToastPodcastEpisodeUpdated": "Podcast-Folge aktualisiert",
-  "ToastPodcastGetFeedFailed": "Fehler beim abrufen des Podcast-Feeds",
+  "ToastPodcastGetFeedFailed": "Fehler beim Abrufen des Podcast Feeds",
   "ToastPodcastNoEpisodesInFeed": "Keine Episoden in RSS Feed gefunden",
   "ToastPodcastNoRssFeed": "Podcast enthält keinen RSS Feed",
   "ToastProgressIsNotBeingSynced": "Fortschritt wird nicht synchronisiert, Wiedergabe wird neu gestartet",

client/strings/es.json

@@ -20,10 +20,10 @@
   "ButtonCheckAndDownloadNewEpisodes": "Comprobar y descargar episodios nuevos",
   "ButtonChooseAFolder": "Elegir una carpeta",
   "ButtonChooseFiles": "Elegir archivos",
-  "ButtonClearFilter": "Quitar filtros",
+  "ButtonClearFilter": "Vaciar filtro",
   "ButtonClose": "Cerrar",
   "ButtonCloseFeed": "Cerrar suministro",
-  "ButtonCloseSession": "Cerrar la sesión abierta",
+  "ButtonCloseSession": "Cerrar sesión abierta",
   "ButtonCollections": "Colecciones",
   "ButtonConfigureScanner": "Configurar Escáner",
   "ButtonCreate": "Crear",
@@ -33,27 +33,27 @@
   "ButtonEdit": "Editar",
   "ButtonEditChapters": "Editar capítulos",
   "ButtonEditPodcast": "Editar pódcast",
-  "ButtonEnable": "Permitir",
+  "ButtonEnable": "Habilitar",
   "ButtonFireAndFail": "Ejecutado y fallido",
   "ButtonFireOnTest": "Activar evento de prueba",
   "ButtonForceReScan": "Forzar Re-Escaneo",
   "ButtonFullPath": "Ruta completa",
   "ButtonHide": "Ocultar",
   "ButtonHome": "Inicio",
-  "ButtonIssues": "Problemas",
+  "ButtonIssues": "Incidencias",
   "ButtonJumpBackward": "Retroceder",
   "ButtonJumpForward": "Adelantar",
   "ButtonLatest": "Más recientes",
   "ButtonLibrary": "Biblioteca",
-  "ButtonLogout": "Salir",
-  "ButtonLookup": "Buscar",
+  "ButtonLogout": "Cerrar Sesión",
+  "ButtonLookup": "Averiguar",
   "ButtonManageTracks": "Gestionar pistas",
   "ButtonMapChapterTitles": "Asignar Títulos a Capítulos",
   "ButtonMatchAllAuthors": "Encontrar Todos los Autores",
-  "ButtonMatchBooks": "Encontrar Libros",
+  "ButtonMatchBooks": "Cotejar Libros",
   "ButtonNevermind": "Olvidar",
   "ButtonNext": "Siguiente",
-  "ButtonNextChapter": "Siguiente Capítulo",
+  "ButtonNextChapter": "Siguiente capítulo",
   "ButtonNextItemInQueue": "El siguiente elemento en cola",
   "ButtonOk": "Aceptar",
   "ButtonOpenFeed": "Abrir suministro",
@@ -64,26 +64,26 @@
   "ButtonPlaying": "Reproduciendo",
   "ButtonPlaylists": "Listas de reproducción",
   "ButtonPrevious": "Anterior",
-  "ButtonPreviousChapter": "Capítulo Anterior",
-  "ButtonProbeAudioFile": "Examinar archivo de audio",
-  "ButtonPurgeAllCache": "Purgar toda la antememoria",
-  "ButtonPurgeItemsCache": "Purgar antememoria de elementos",
-  "ButtonQueueAddItem": "Añadir a la cola",
-  "ButtonQueueRemoveItem": "Quitar de la cola",
+  "ButtonPreviousChapter": "Capítulo anterior",
+  "ButtonProbeAudioFile": "Sonda del archivo de audio",
+  "ButtonPurgeAllCache": "Purgar toda la caché",
+  "ButtonPurgeItemsCache": "Purgar caché de elementos",
+  "ButtonQueueAddItem": "Añadir a cola",
+  "ButtonQueueRemoveItem": "Quitar de cola",
   "ButtonQuickEmbed": "Inserción rápida",
-  "ButtonQuickEmbedMetadata": "Agregue metadatos rápidamente",
-  "ButtonQuickMatch": "Encontrar Rápido",
+  "ButtonQuickEmbedMetadata": "Empotrar metadatos rápidamente",
+  "ButtonQuickMatch": "Cotejo Rápido",
   "ButtonReScan": "Re-Escanear",
   "ButtonRead": "Leer",
   "ButtonReadLess": "Leer menos",
   "ButtonReadMore": "Leer más",
-  "ButtonRefresh": "Actualizar",
+  "ButtonRefresh": "Recargar",
   "ButtonRemove": "Quitar",
   "ButtonRemoveAll": "Quitar todo",
   "ButtonRemoveAllLibraryItems": "Quitar todos los elementos de la biblioteca",
-  "ButtonRemoveFromContinueListening": "Quitar de Continuar escuchando",
-  "ButtonRemoveFromContinueReading": "Quitar de Continuar leyendo",
-  "ButtonRemoveSeriesFromContinueSeries": "Quitar serie de Continuar serie",
+  "ButtonRemoveFromContinueListening": "Quitar desde Escucha Continua",
+  "ButtonRemoveFromContinueReading": "Quitar desde Continuar Leyendo",
+  "ButtonRemoveSeriesFromContinueSeries": "Quitar Series desde Series Continuas",
   "ButtonReset": "Restablecer",
   "ButtonResetToDefault": "Restaurar valores predeterminados",
   "ButtonRestore": "Restaurar",
@@ -92,47 +92,47 @@
   "ButtonSaveTracklist": "Guardar lista de pistas",
   "ButtonScan": "Escanear",
   "ButtonScanLibrary": "Escanear biblioteca",
-  "ButtonScrollLeft": "Desplazarse hacia la izquierda",
-  "ButtonScrollRight": "Desplazarse hacia la derecha",
+  "ButtonScrollLeft": "Desplazarse a la izquierda",
+  "ButtonScrollRight": "Desplazarse a la derecha",
   "ButtonSearch": "Buscar",
   "ButtonSelectFolderPath": "Seleccionar ruta de carpeta",
   "ButtonSeries": "Series",
-  "ButtonSetChaptersFromTracks": "Seleccionar Capítulos Según las Pistas",
+  "ButtonSetChaptersFromTracks": "Establecer capítulos según las pistas",
   "ButtonShare": "Compartir",
-  "ButtonShiftTimes": "Desplazar Tiempos",
+  "ButtonShiftTimes": "Veces de Desplazo",
   "ButtonShow": "Mostrar",
   "ButtonStartM4BEncode": "Iniciar Codificación M4B",
-  "ButtonStartMetadataEmbed": "Iniciar la Inserción de Metadata",
+  "ButtonStartMetadataEmbed": "Iniciar Inserción de Metadatos",
   "ButtonStats": "Estadísticas",
-  "ButtonSubmit": "Enviar",
+  "ButtonSubmit": "Entregar",
   "ButtonTest": "Prueba",
-  "ButtonUnlinkOpenId": "Desvincular OpenID",
-  "ButtonUpload": "Cargar",
-  "ButtonUploadBackup": "Cargar respaldo",
-  "ButtonUploadCover": "Cargar cubierta",
-  "ButtonUploadOPMLFile": "Cargar archivo OPML",
+  "ButtonUnlinkOpenId": "Desenlazar OpenID",
+  "ButtonUpload": "Subir",
+  "ButtonUploadBackup": "Subir Respaldo",
+  "ButtonUploadCover": "Subir Cubierta",
+  "ButtonUploadOPMLFile": "Subir archivo OPML",
   "ButtonUserDelete": "Eliminar usuario {0}",
   "ButtonUserEdit": "Editar usuario {0}",
   "ButtonViewAll": "Ver todo",
   "ButtonYes": "Sí",
   "ErrorUploadFetchMetadataAPI": "Error al recuperar los metadatos",
-  "ErrorUploadFetchMetadataNoResults": "No se pudieron recuperar los metadatos; pruebe a actualizar el título o autor",
-  "ErrorUploadLacksTitle": "Debe tener título",
+  "ErrorUploadFetchMetadataNoResults": "No se pudieron recuperar los metadatos; pruebe a actualizar el título y/o autor",
+  "ErrorUploadLacksTitle": "Debe tener un título",
   "HeaderAccount": "Cuenta",
   "HeaderAddCustomMetadataProvider": "Añadir proveedor de metadatos personalizado",
   "HeaderAdvanced": "Avanzado",
   "HeaderApiKeys": "Claves API",
-  "HeaderAppriseNotificationSettings": "Configuración de notificaciones de Apprise",
-  "HeaderAudioTracks": "Pistas de audio",
+  "HeaderAppriseNotificationSettings": "Ajustes de notificaciones de Apprise",
+  "HeaderAudioTracks": "Pistas de Audio",
   "HeaderAudiobookTools": "Herramientas de Gestión de Archivos de Audiolibro",
   "HeaderAuthentication": "Autenticación",
   "HeaderBackups": "Respaldos",
   "HeaderBulkChapterModal": "Añadir Múltiples Capítulos",
-  "HeaderChangePassword": "Cambiar contraseña",
+  "HeaderChangePassword": "Cambiar Contraseña",
   "HeaderChapters": "Capítulos",
   "HeaderChooseAFolder": "Escoger una Carpeta",
   "HeaderCollection": "Colección",
-  "HeaderCollectionItems": "Elementos en la colección",
+  "HeaderCollectionItems": "Elementos de colección",
   "HeaderCover": "Cubierta",
   "HeaderCurrentDownloads": "Descargas actuales",
   "HeaderCustomMessageOnLogin": "Mensaje personalizado al acceder",
@@ -140,49 +140,49 @@
   "HeaderDetails": "Detalles",
   "HeaderDownloadQueue": "Cola de descargas",
   "HeaderEbookFiles": "Archivos de libros digitales",
-  "HeaderEmail": "Correo electrónico",
-  "HeaderEmailSettings": "Configuración de correo electrónico",
+  "HeaderEmail": "Correo-e",
+  "HeaderEmailSettings": "Ajustes de correo-e",
   "HeaderEpisodes": "Episodios",
-  "HeaderEreaderDevices": "Dispositivos Ereader",
-  "HeaderEreaderSettings": "Configuración del lector",
+  "HeaderEreaderDevices": "Dispositivos Lector-e",
+  "HeaderEreaderSettings": "Ajustes del Lector-e",
   "HeaderFiles": "Archivos",
   "HeaderFindChapters": "Buscar capítulos",
   "HeaderIgnoredFiles": "Archivos ignorados",
-  "HeaderItemFiles": "Archivos de elementos",
-  "HeaderItemMetadataUtils": "Utilidades de metadatos de elementos",
+  "HeaderItemFiles": "Archivos del elemento",
+  "HeaderItemMetadataUtils": "Utilidades de metadatos del elemento",
   "HeaderLastListeningSession": "Última sesión de escucha",
   "HeaderLatestEpisodes": "Episodios más recientes",
   "HeaderLibraries": "Bibliotecas",
   "HeaderLibraryFiles": "Archivos de biblioteca",
   "HeaderLibraryStats": "Estadísticas de biblioteca",
-  "HeaderListeningSessions": "Sesión",
+  "HeaderListeningSessions": "Sesiones Listadas",
   "HeaderListeningStats": "Estadísticas de Tiempo Escuchado",
-  "HeaderLogin": "Acceder",
-  "HeaderLogs": "Registros",
+  "HeaderLogin": "Inicio de Sesión",
+  "HeaderLogs": "Bitácoras",
   "HeaderManageGenres": "Gestionar géneros",
   "HeaderManageTags": "Gestionar etiquetas",
   "HeaderMapDetails": "Asignar Detalles",
-  "HeaderMatch": "Encontrar",
+  "HeaderMatch": "Coincidir",
   "HeaderMetadataOrderOfPrecedence": "Orden de precedencia de metadatos",
-  "HeaderMetadataToEmbed": "Metadatos para Insertar",
-  "HeaderNewAccount": "Cuenta nueva",
+  "HeaderMetadataToEmbed": "Metadatos para empotrar",
+  "HeaderNewAccount": "Crear Cuenta",
   "HeaderNewApiKey": "Nueva clave API",
   "HeaderNewLibrary": "Biblioteca nueva",
-  "HeaderNotificationCreate": "Crear notificación",
-  "HeaderNotificationUpdate": "Notificación de actualización",
+  "HeaderNotificationCreate": "Crear Notificación",
+  "HeaderNotificationUpdate": "Notificación de Actualización",
   "HeaderNotifications": "Notificaciones",
   "HeaderOpenIDConnectAuthentication": "Autenticación OpenID Connect",
-  "HeaderOpenListeningSessions": "Sesiones públicas de escucha",
+  "HeaderOpenListeningSessions": "Abrir escucha de sesiones",
   "HeaderOpenRSSFeed": "Abrir suministro RSS",
   "HeaderOtherFiles": "Otros archivos",
   "HeaderPasswordAuthentication": "Autenticación por contraseña",
   "HeaderPermissions": "Permisos",
   "HeaderPlayerQueue": "Cola del reproductor",
-  "HeaderPlayerSettings": "Configuración del reproductor",
+  "HeaderPlayerSettings": "Ajustes del reproductor",
   "HeaderPlaylist": "Lista de reproducción",
   "HeaderPlaylistItems": "Elementos de lista de reproducción",
   "HeaderPodcastsToAdd": "Pódcast para añadir",
-  "HeaderPresets": "Preconfiguraciones",
+  "HeaderPresets": "Preajustes",
   "HeaderPreviewCover": "Previsualizar cubierta",
   "HeaderRSSFeedGeneral": "Detalles de RSS",
   "HeaderRSSFeedIsOpen": "El suministro RSS está abierto",
@@ -191,18 +191,18 @@
   "HeaderRemoveEpisodes": "Quitar {0} episodios",
   "HeaderSavedMediaProgress": "Guardar Progreso de Multimedia",
   "HeaderSchedule": "Horario",
-  "HeaderScheduleEpisodeDownloads": "Programar descargas automáticas de episodios",
-  "HeaderScheduleLibraryScans": "Programar Escaneo Automático de Biblioteca",
+  "HeaderScheduleEpisodeDownloads": "Planificador de auto‐descargas de episodios",
+  "HeaderScheduleLibraryScans": "Planificar Auto‐Escaneo de Biblioteca",
   "HeaderSession": "Sesión",
-  "HeaderSetBackupSchedule": "Programar Respaldo",
-  "HeaderSettings": "Configuración",
+  "HeaderSetBackupSchedule": "Establecer Planificación de Respaldo",
+  "HeaderSettings": "Ajustes",
   "HeaderSettingsDisplay": "Interfaz",
-  "HeaderSettingsExperimental": "Funcionalidades experimentales",
+  "HeaderSettingsExperimental": "Características experimentales",
   "HeaderSettingsGeneral": "Generales",
   "HeaderSettingsScanner": "Escáner",
   "HeaderSettingsSecurity": "Seguridad",
   "HeaderSettingsWebClient": "Cliente web",
-  "HeaderSleepTimer": "Temporizador de apagado",
+  "HeaderSleepTimer": "Cronómetro de dormida",
   "HeaderStatsLargestItems": "Elementos más grandes",
   "HeaderStatsLongestItems": "Elementos más extensos (h)",
   "HeaderStatsMinutesListeningChart": "Minutos escuchando (últimos 7 días)",
@@ -233,29 +233,29 @@
   "LabelAddToCollectionBatch": "Añadir {0} libros a colección",
   "LabelAddToPlaylist": "Añadir a lista de reproducción",
   "LabelAddToPlaylistBatch": "Añadir {0} elementos a lista de reproducción",
-  "LabelAddedAt": "Añadido",
-  "LabelAddedDate": "{0} Añadido",
+  "LabelAddedAt": "Añadido en",
+  "LabelAddedDate": "Añadido {0}",
   "LabelAdminUsersOnly": "Solamente usuarios administradores",
   "LabelAll": "Todos",
   "LabelAllEpisodesDownloaded": "Todos los episodios descargados",
   "LabelAllUsers": "Todos los usuarios",
   "LabelAllUsersExcludingGuests": "Todos los usuarios excepto invitados",
   "LabelAllUsersIncludingGuests": "Todos los usuarios e invitados",
-  "LabelAlreadyInYourLibrary": "Ya existe en la Biblioteca",
-  "LabelApiKeyCreated": "La clave de API “{0}” se ha creado con éxito.",
+  "LabelAlreadyInYourLibrary": "Ya dentro de tu biblioteca",
+  "LabelApiKeyCreated": "La clave de API “{0}” se ha creado correctamente.",
   "LabelApiKeyCreatedDescription": "Asegúrate de copiar la clave de API ahora, no la volverás a ver otra vez.",
   "LabelApiKeyUser": "Actuar en nombre del usuario",
   "LabelApiKeyUserDescription": "Esta clave de API tendrá los mismos permisos que el usuario al que representa. En los registros se verá como si la solicitud la hubiera hecho el usuario directamente.",
-  "LabelApiToken": "Token de la API",
+  "LabelApiToken": "Vale del API",
   "LabelAppend": "Adjuntar",
-  "LabelAudioBitrate": "Tasa de bits del audio (por ejemplo, 128k)",
+  "LabelAudioBitrate": "Tasa de bit del audio (p.ej., 128k)",
   "LabelAudioChannels": "Canales de audio (1 o 2)",
   "LabelAudioCodec": "Códec de audio",
   "LabelAuthor": "Autor",
   "LabelAuthorFirstLast": "Autor (Nombre Apellido)",
   "LabelAuthorLastFirst": "Autor (Apellido, Nombre)",
   "LabelAuthors": "Autores",
-  "LabelAutoDownloadEpisodes": "Descargar episodios automáticamente",
+  "LabelAutoDownloadEpisodes": "Auto‐Descargar episodios",
   "LabelAutoFetchMetadata": "Recuperar metadatos automáticamente",
   "LabelAutoFetchMetadataHelp": "Obtiene metadatos de título, autor y serie para agilizar la carga. Es posible que haya que cotejar metadatos adicionales después de la carga.",
   "LabelAutoLaunch": "Lanzamiento automático",
@@ -275,7 +275,7 @@
   "LabelBonus": "Bonus",
   "LabelBooks": "Libros",
   "LabelButtonText": "Texto del botón",
-  "LabelByAuthor": "por",
+  "LabelByAuthor": "por {0}",
   "LabelChangePassword": "Cambiar contraseña",
   "LabelChannels": "Canales",
   "LabelChapterCount": "{0} capítulos",
@@ -286,13 +286,13 @@
   "LabelClickToUseCurrentValue": "Pulse para utilizar el valor actual",
   "LabelClosePlayer": "Cerrar reproductor",
   "LabelCodec": "Codec",
-  "LabelCollapseSeries": "Colapsar serie",
+  "LabelCollapseSeries": "Colapsar Series",
   "LabelCollapseSubSeries": "Contraer la subserie",
   "LabelCollection": "Colección",
   "LabelCollections": "Colecciones",
   "LabelComplete": "Completo",
   "LabelConfirmPassword": "Confirmar contraseña",
-  "LabelContinueListening": "Seguir escuchando",
+  "LabelContinueListening": "Seguir Escuchando",
   "LabelContinueReading": "Continuar leyendo",
   "LabelContinueSeries": "Continuar series",
   "LabelCorsAllowed": "Orígenes CORS Permitidos",
@@ -325,14 +325,14 @@
   "LabelDurationComparisonLonger": "({0} más largo)",
   "LabelDurationComparisonShorter": "({0} más corto)",
   "LabelDurationFound": "Duración Comprobada:",
-  "LabelEbook": "Libro electrónico",
-  "LabelEbooks": "Libros electrónicos",
+  "LabelEbook": "Libro-e",
+  "LabelEbooks": "Libros-e",
   "LabelEdit": "Editar",
   "LabelEmail": "Correo electrónico",
   "LabelEmailSettingsFromAddress": "Remitente",
   "LabelEmailSettingsRejectUnauthorized": "Rechazar certificados no autorizados",
   "LabelEmailSettingsRejectUnauthorizedHelp": "Desactivar la validación de certificados SSL puede exponer su conexión a riesgos de seguridad, como los ataques por intermediario. Desactive esta opción solo si conoce las implicaciones y confía en el servidor de correo al que se conecta.",
-  "LabelEmailSettingsSecure": "Seguridad",
+  "LabelEmailSettingsSecure": "Seguro",
   "LabelEmailSettingsSecureHelp": "Si está activado, se usará TLS para conectarse al servidor. Si está apagado, se usará TLS si su servidor tiene soporte para la extensión STARTTLS. En la mayoría de los casos, puede dejar esta opción activada si se está conectando al puerto 465. Apáguela en el caso de usar los puertos 587 o 25. (de nodemailer.com/smtp/#authentication)",
   "LabelEmailSettingsTestAddress": "Probar dirección",
   "LabelEmbeddedCover": "Cubierta incrustada",
@@ -377,11 +377,12 @@
   "LabelFilename": "Nombre del archivo",
   "LabelFilterByUser": "Filtrar por Usuario",
   "LabelFindEpisodes": "Buscar Episodio",
-  "LabelFinished": "Terminado",
+  "LabelFinished": "Finalizado",
+  "LabelFinishedDate": "Finalizado {0}",
   "LabelFolder": "Carpeta",
   "LabelFolders": "Carpetas",
   "LabelFontBold": "Negrilla",
-  "LabelFontBoldness": "Peso tipográfico",
+  "LabelFontBoldness": "Tipográfico sin Negrita",
   "LabelFontFamily": "Familia tipográfica",
   "LabelFontItalic": "Itálica",
   "LabelFontScale": "Escala de letra",
@@ -391,8 +392,8 @@
   "LabelGenre": "Género",
   "LabelGenres": "Géneros",
   "LabelHardDeleteFile": "Eliminar Definitivamente",
-  "LabelHasEbook": "Tiene un libro",
-  "LabelHasSupplementaryEbook": "Tiene un libro complementario",
+  "LabelHasEbook": "Tiene libro-e",
+  "LabelHasSupplementaryEbook": "Tiene un libro-e suplementario",
   "LabelHideSubtitles": "Ocultar subtítulos",
   "LabelHighestPriority": "Mayor prioridad",
   "LabelHost": "Anfitrión",
@@ -422,6 +423,7 @@
   "LabelLanguages": "Idiomas",
   "LabelLastBookAdded": "Último libro añadido",
   "LabelLastBookUpdated": "Último libro actualizado",
+  "LabelLastProgressDate": "Último progreso: {0}",
   "LabelLastSeen": "Última Vez Visto",
   "LabelLastTime": "Última Vez",
   "LabelLastUpdate": "Última Actualización",
@@ -434,6 +436,9 @@
   "LabelLibraryFilterSublistEmpty": "Sin {0}",
   "LabelLibraryItem": "Elemento de Biblioteca",
   "LabelLibraryName": "Nombre de Biblioteca",
+  "LabelLibrarySortByProgress": "Progreso: Último actualizado",
+  "LabelLibrarySortByProgressFinished": "Progreso: Finalizado",
+  "LabelLibrarySortByProgressStarted": "Progreso: Iniciado",
   "LabelLimit": "Limites",
   "LabelLineSpacing": "Interlineado",
   "LabelListenAgain": "Volver a escuchar",
@@ -442,6 +447,7 @@
   "LabelLogLevelWarn": "Advertencia",
   "LabelLookForNewEpisodesAfterDate": "Buscar Nuevos Episodios a partir de esta Fecha",
   "LabelLowestPriority": "Menor prioridad",
+  "LabelMatchConfidence": "Confidencia",
   "LabelMatchExistingUsersBy": "Emparejar a los usuarios existentes por",
   "LabelMatchExistingUsersByDescription": "Se utiliza para conectar usuarios existentes. Una vez conectados, los usuarios serán emparejados por un identificador único de su proveedor de SSO",
   "LabelMaxEpisodesToDownload": "Número máximo # de episodios para descargar. Usa 0 para descargar una cantidad ilimitada.",
@@ -460,7 +466,7 @@
   "LabelMissingEbook": "No tiene libro electrónico",
   "LabelMissingSupplementaryEbook": "No tiene libro electrónico suplementario",
   "LabelMobileRedirectURIs": "URIs de redirección a móviles permitidos",
-  "LabelMobileRedirectURIsDescription": "Esta es una lista blanca de URI de redireccionamiento válidos para aplicaciones móviles. El predeterminado es <code> audiobookshelf</code> , que puede eliminar o complementar con URI adicionales para la integración de aplicaciones de terceros. Usando un asterisco (<code> *</code> ) como única entrada que permite cualquier URI.",
+  "LabelMobileRedirectURIsDescription": "Esta es una lista en blanco de las URI de re‐direccionamiento válidos para aplicaciones móviles. El predeterminado es <code>audiobookshelf</code> , que puede retirar o sustituir con las URI adicionales para la integración de aplicaciones de terceros. Usando un asterisco (<code>*</code> ) como única entrada que permite cualquier URI.",
   "LabelMore": "Más",
   "LabelMoreInfo": "Más información",
   "LabelName": "Nombre",
@@ -473,9 +479,10 @@
   "LabelNextBackupDate": "Fecha del siguiente respaldo",
   "LabelNextChapters": "Los próximos capítulos serán:",
   "LabelNextScheduledRun": "Próxima ejecución programada",
+  "LabelNoApiKeys": "Sin claves API",
   "LabelNoCustomMetadataProviders": "Sin proveedores de metadatos personalizados",
   "LabelNoEpisodesSelected": "Ningún Episodio Seleccionado",
-  "LabelNotFinished": "No terminado",
+  "LabelNotFinished": "No finalizado",
   "LabelNotStarted": "Sin iniciar",
   "LabelNotes": "Notas",
   "LabelNotificationAppriseURL": "URL(s) de Apprise",
@@ -489,7 +496,7 @@
   "LabelNotificationsMaxQueueSizeHelp": "Las notificaciones están limitadas a 1 por segundo. Las notificaciones serán ignoradas si llegan al numero máximo de cola para prevenir spam de eventos.",
   "LabelNumberOfBooks": "Número de libros",
   "LabelNumberOfChapters": "Número de capítulos:",
-  "LabelNumberOfEpisodes": "N.º de episodios",
+  "LabelNumberOfEpisodes": "Nº de episodios",
   "LabelOpenIDAdvancedPermsClaimDescription": "Nombre de la notificación de OpenID que contiene permisos avanzados para acciones de usuario dentro de la aplicación que se aplicarán a roles que no sean de administrador (<b>si están configurados</b>). Si el reclamo no aparece en la respuesta, se denegará el acceso a ABS. Si falta una sola opción, se tratará como <code>falsa</code>. Asegúrese de que la notificación del proveedor de identidades coincida con la estructura esperada:",
   "LabelOpenIDClaims": "Deje las siguientes opciones vacías para desactivar la asignación avanzada de grupos y permisos, lo que asignaría de manera automática al grupo «Usuario».",
   "LabelOpenIDGroupClaimDescription": "Nombre de la declaración OpenID que contiene una lista de grupos del usuario. Comúnmente conocidos como <code>grupos</code>. <b>Si se configura</b>, la aplicación asignará automáticamente roles en función de la pertenencia a grupos del usuario, siempre que estos grupos se denominen \"admin\", \"user\" o \"guest\" en la notificación. La solicitud debe contener una lista, y si un usuario pertenece a varios grupos, la aplicación asignará el rol correspondiente al mayor nivel de acceso. Si ningún grupo coincide, se denegará el acceso.",
@@ -519,7 +526,7 @@
   "LabelPodcasts": "Pódcast",
   "LabelPort": "Puerto",
   "LabelPrefixesToIgnore": "Prefijos para ignorar (no distingue entre mayúsculas y minúsculas)",
-  "LabelPreventIndexing": "Evite que los directorios de pódcast de iTunes y Google indicen su suministro",
+  "LabelPreventIndexing": "Evite que los directorios de pódcast de iTunes y Google indexen su suministro",
   "LabelPrimaryEbook": "Libro electrónico principal",
   "LabelProgress": "Progreso",
   "LabelProvider": "Proveedor",
@@ -531,11 +538,11 @@
   "LabelPublishedDecades": "Décadas publicadas",
   "LabelPublisher": "Editor",
   "LabelPublishers": "Editores",
-  "LabelRSSFeedCustomOwnerEmail": "Correo electrónico de dueño personalizado",
-  "LabelRSSFeedCustomOwnerName": "Nombre de dueño personalizado",
+  "LabelRSSFeedCustomOwnerEmail": "Correo-e de propietario personalizado",
+  "LabelRSSFeedCustomOwnerName": "Nombre de propietario personalizado",
   "LabelRSSFeedOpen": "Fuente RSS Abierta",
   "LabelRSSFeedPreventIndexing": "Evitar indización",
-  "LabelRSSFeedSlug": "«Slug» de suministro RSS",
+  "LabelRSSFeedSlug": "Ficha de suministro RSS",
   "LabelRSSFeedURL": "URL de suministro RSS",
   "LabelRandomly": "Aleatorio",
   "LabelReAddSeriesToContinueListening": "Volver a agregar la serie para continuar escuchándola",
@@ -563,11 +570,12 @@
   "LabelSelectAll": "Seleccionar todo",
   "LabelSelectAllEpisodes": "Seleccionar todos los episodios",
   "LabelSelectEpisodesShowing": "Seleccionar los {0} episodios visibles",
+  "LabelSelectUser": "Seleccionar usuario",
   "LabelSelectUsers": "Seleccionar usuarios",
   "LabelSendEbookToDevice": "Enviar libro electrónico a...",
   "LabelSequence": "Secuencia",
   "LabelSerial": "En serie",
-  "LabelSeries": "Serie",
+  "LabelSeries": "Series",
   "LabelSeriesName": "Nombre de la serie",
   "LabelSeriesProgress": "Progreso de la serie",
   "LabelServerLogLevel": "Nivel de registro del servidor",
@@ -580,8 +588,8 @@
   "LabelSettingsBookshelfViewHelp": "Diseño Esqueuomorfo con Estantes de Madera",
   "LabelSettingsChromecastSupport": "Compatibilidad con Chromecast",
   "LabelSettingsDateFormat": "Formato de Fecha",
-  "LabelSettingsEnableWatcher": "Buscar cambios automáticamente en las bibliotecas",
-  "LabelSettingsEnableWatcherForLibrary": "Buscar cambios automáticamente en la biblioteca",
+  "LabelSettingsEnableWatcher": "Vigilar automáticamente los cambios en bibliotecas",
+  "LabelSettingsEnableWatcherForLibrary": "Vigilar automáticamente los cambios de biblioteca",
   "LabelSettingsEnableWatcherHelp": "Permite agregar/actualizar elementos automáticamente cuando se detectan cambios en los archivos. *Requiere reiniciar el servidor",
   "LabelSettingsEpubsAllowScriptedContent": "Permitir scripts en epubs",
   "LabelSettingsEpubsAllowScriptedContentHelp": "Permitir que los archivos epub ejecuten scripts. Se recomienda mantener esta opción desactivada a menos que confíe en el origen de los archivos epub.",
@@ -614,14 +622,14 @@
   "LabelSettingsStoreMetadataWithItemHelp": "Por defecto, los archivos de metadatos se almacenan en /metadata/items. Si habilita esta opción, los archivos de metadatos se guardarán en la carpeta de elementos de su biblioteca",
   "LabelSettingsTimeFormat": "Formato de Tiempo",
   "LabelShare": "Compartir",
-  "LabelShareDownloadableHelp": "Permite a quienes posean el enlace de compartición descargar un archivo ZIP del elemento de la biblioteca.",
+  "LabelShareDownloadableHelp": "Permite a quienes posean el enlace de compartición descargar un archivo zip del elemento de la biblioteca.",
   "LabelShareOpen": "abrir un recurso compartido",
   "LabelShareURL": "Compartir la URL",
   "LabelShowAll": "Mostrar todo",
   "LabelShowSeconds": "Mostrar segundos",
   "LabelShowSubtitles": "Mostrar subtítulos",
   "LabelSize": "Tamaño",
-  "LabelSleepTimer": "Temporizador de apagado",
+  "LabelSleepTimer": "Temporizador de dormida",
   "LabelSlug": "Slug",
   "LabelSortAscending": "Ascendente",
   "LabelSortDescending": "Descendente",
@@ -630,6 +638,7 @@
   "LabelStartTime": "Tiempo de Inicio",
   "LabelStarted": "Iniciado",
   "LabelStartedAt": "Iniciado En",
+  "LabelStartedDate": "Iniciado {0}",
   "LabelStatsAudioTracks": "Pistas de Audio",
   "LabelStatsAuthors": "Autores",
   "LabelStatsBestDay": "Mejor día",
@@ -659,6 +668,7 @@
   "LabelTheme": "Tema",
   "LabelThemeDark": "Oscuro",
   "LabelThemeLight": "Claro",
+  "LabelThemeSepia": "Sepia",
   "LabelTimeBase": "Tiempo Base",
   "LabelTimeDurationXHours": "{0} horas",
   "LabelTimeDurationXMinutes": "{0} minutos",
@@ -727,8 +737,10 @@
   "MessageAddToPlayerQueue": "Agregar a fila del Reproductor",
   "MessageAppriseDescription": "Para usar esta función deberás tener <a href=\"https://github.com/caronc/apprise-api\" target=\"_blank\">la API de Apprise</a> corriendo o una API que maneje los mismos resultados. <br/>La URL de la API de Apprise debe tener la misma ruta de archivos que donde se envían las notificaciones. Por ejemplo: si su API esta en <code>http://192.168.1.1:8337</code> entonces pondría <code>http://192.168.1.1:8337/notify</code>.",
   "MessageAsinCheck": "Cerciórese de usar el ASIN de la región correcta de Audible, no de Amazon.",
+  "MessageAuthenticationLegacyTokenWarning": "Los vales de API heredados serán retirados en el futuro. Utilice las <a href=\"/config/api-keys\">claves de API</a> en su lugar.",
   "MessageAuthenticationOIDCChangesRestart": "Reinicie el servidor tras el guardado para aplicar los cambios de OIDC.",
-  "MessageBackupsDescription": "Los respaldos incluyen: usuarios, el progreso del los usuarios, los detalles de los elementos de la biblioteca, la configuración del servidor y las imágenes en <code>/metadata/items</code> y <code>/metadata/authors</code>. Los Respaldos <strong>NO</strong> incluyen ningún archivo guardado en la carpeta de tu biblioteca.",
+  "MessageAuthenticationSecurityMessage": "La autenticación ha sido mejorada para seguridad. Todos los usuarios requieren reiniciar sesión.",
+  "MessageBackupsDescription": "Los respaldos incluyen: usuarios, el progreso del los usuarios, los detalles de los elementos de la biblioteca, la configuración del servidor y las imágenes en <code>/metadata/items</code> y <code>/metadata/authors</code>. Los Respaldos <strong>no</strong> incluyen ningún archivo guardado en la carpeta de tu biblioteca.",
   "MessageBackupsLocationEditNote": "Nota: actualizar la ubicación de la copia de respaldo no moverá ni modificará los respaldos existentes",
   "MessageBackupsLocationNoEditNote": "Nota: la ubicación de la copia de respaldo se establece a través de una variable de entorno y no se puede cambiar aquí.",
   "MessageBackupsLocationPathEmpty": "La ruta de la copia de seguridad no puede estar vacía",
@@ -750,6 +762,7 @@
   "MessageChaptersNotFound": "Capítulos no encontrados",
   "MessageCheckingCron": "Revisando cron...",
   "MessageConfirmCloseFeed": "¿Confirma que quiere cerrar este suministro?",
+  "MessageConfirmDeleteApiKey": "¿Está seguro que desea eliminar la clave API «{0}»?",
   "MessageConfirmDeleteBackup": "¿Confirma que quiere eliminar el respaldo de {0}?",
   "MessageConfirmDeleteDevice": "¿Confirma que quiere eliminar el lector electrónico «{0}»?",
   "MessageConfirmDeleteFile": "Esto eliminará el archivo del sistema de archivos. ¿Quiere continuar?",
@@ -768,8 +781,8 @@
   "MessageConfirmMarkSeriesFinished": "¿Confirma que quiere marcar todos los libros de esta serie como terminados?",
   "MessageConfirmMarkSeriesNotFinished": "¿Confirma que quiere marcar todos los libros de esta serie como no terminados?",
   "MessageConfirmNotificationTestTrigger": "¿Activar esta notificación con datos de prueba?",
-  "MessageConfirmPurgeCache": "Purgar la antememoria eliminará el directorio completo ubicado en <code>/metadata/cache</code>. <br /><br />¿Confirma que quiere eliminar el directorio de antememoria?",
-  "MessageConfirmPurgeItemsCache": "Purgar la antememoria de elementos eliminará el directorio completo ubicado en <code>/metadata/cache/items</code>.<br />¿Lo confirma?",
+  "MessageConfirmPurgeCache": "La purga del caché eliminará el directorio completo en <code>/metadata/cache</code>. <br /><br />¿Confirma que desea quitar el directorio de caché?",
+  "MessageConfirmPurgeItemsCache": "Purgar el caché de elementos eliminará el directorio completo ubicado en <code>/metadata/cache/items</code>.<br />¿Lo confirma?",
   "MessageConfirmQuickEmbed": "Atención: la incrustación rápida no realiza copias de respaldo a ninguno de sus archivos de audio. Cerciórese de haber realizado una copia de los mismos previamente. <br><br>¿Quiere continuar?",
   "MessageConfirmQuickMatchEpisodes": "El reconocimiento rápido de extensiones sobrescribirá los detalles si se encuentra una coincidencia. Se actualizarán las extensiones no reconocidas. ¿Quiere continuar?",
   "MessageConfirmReScanLibraryItems": "¿Confirma que quiere volver a analizar {0} elementos?",
@@ -795,14 +808,16 @@
   "MessageDaysListenedInTheLastYear": "{0} días escuchados el año pasado",
   "MessageDownloadingEpisode": "Descargando episodio",
   "MessageDragFilesIntoTrackOrder": "Arrastre los archivos al orden correcto de las pistas",
-  "MessageEmbedFailed": "Falló la incrustación.",
-  "MessageEmbedFinished": "Finalizó la incrustación.",
+  "MessageEmbedFailed": "Incorporación incorrecta.",
+  "MessageEmbedFinished": "Incorporación finalizada.",
   "MessageEmbedQueue": "En cola para incrustar metadatos ({0} en cola)",
   "MessageEpisodesQueuedForDownload": "{0} episodio(s) en cola para descargar",
   "MessageEreaderDevices": "Para garantizar la entrega de libros electrónicos, es posible que tenga que agregar la dirección de correo electrónico anterior como remitente válido para cada dispositivo enumerado a continuación.",
   "MessageFeedURLWillBe": "El URL del suministro será {0}",
   "MessageFetching": "Recuperando...",
   "MessageForceReScanDescription": "Escaneará todos los archivos como un nuevo escaneo. Archivos de audio con etiquetas ID3, archivos OPF y archivos de texto serán escaneados como nuevos.",
+  "MessageHeatmapListeningTimeTooltip": "<strong>{0} escuchando</strong> en {1}",
+  "MessageHeatmapNoListeningSessions": "No enumera sesiones en {0}",
   "MessageImportantNotice": "¡Notificación importante!",
   "MessageInsertChapterBelow": "Insertar capítulo debajo",
   "MessageInvalidAsin": "ASIN no válido",
@@ -835,7 +850,7 @@
   "MessageNoEpisodes": "Ningún episodio",
   "MessageNoFoldersAvailable": "Ninguna carpeta disponible",
   "MessageNoGenres": "Ningún género",
-  "MessageNoIssues": "Ningún número",
+  "MessageNoIssues": "Sin incidencias",
   "MessageNoItems": "Ningún elemento",
   "MessageNoItemsFound": "Ningún elemento encontrado",
   "MessageNoListeningSessions": "Ninguna sesión de escucha",
@@ -873,7 +888,7 @@
   "MessageResetChaptersConfirm": "¿Confirma que quiere deshacer los cambios y restablecer los capítulos a su estado original?",
   "MessageRestoreBackupConfirm": "¿Confirma que quiere restaurar el respaldo creado el",
   "MessageRestoreBackupWarning": "Restaurar sobrescribirá toda la base de datos localizada en /config y las imágenes de portadas en /metadata/items y /metadata/authors.<br /><br />El respaldo no modifica ningún archivo en las carpetas de su biblioteca. Si ha habilitado la opción del servidor para almacenar portadas y metadata en las carpetas de su biblioteca, esos archivos no se respaldan o sobrescriben.<br /><br />Todos los clientes que usen su servidor se actualizarán automáticamente.",
-  "MessageScheduleLibraryScanNote": "Para la mayoría de los usuarios, se recomienda dejar esta función desactivada y mantener activada la configuración del observador de carpetas. El observador de carpetas detectará automáticamente los cambios en las carpetas de la biblioteca. El observador de carpetas no funciona para todos los sistemas de archivos (como NFS), por lo que se pueden utilizar exploraciones programadas de la biblioteca en su lugar.",
+  "MessageScheduleLibraryScanNote": "Para muchos usuarios, es recomendado dejar esta característica inhabilitada y mantener habilitados los ajustes de la «Vigía automática de cambio de biblioteca»: detectará automáticamente los cambios en sus carpetas de bibliotecas. Habilitar esta características si «Vigía automática de cambio de biblioteca» no funciona en su sistema de archivo (como NFS).",
   "MessageScheduleRunEveryWeekdayAtTime": "Ejecutar cada {0} a las {1}",
   "MessageSearchResultsFor": "Resultados de la búsqueda de",
   "MessageSelected": "{0} seleccionado(s)",
@@ -999,6 +1014,8 @@
   "ToastBulkChapterInvalidCount": "Por favor ingrese un número válido entre 1 y 150",
   "ToastCachePurgeFailed": "No se pudo purgar la antememoria",
   "ToastCachePurgeSuccess": "Se purgó la antememoria correctamente",
+  "ToastChapterLocked": "El capítulo está bloqueado.",
+  "ToastChapterStartTimeAdjusted": "El capítulo inicia el tiempo ajustado en {0} segundos",
   "ToastChaptersAllLocked": "Todos los capítulos están bloqueados. Desbloquee algunos capítulos para cambiar sus tiempos.",
   "ToastChaptersHaveErrors": "Los capítulos tienen errores",
   "ToastChaptersInvalidShiftAmountLast": "Cantidad de desplazamiento no válida. La hora de inicio del último capítulo se extendería más allá de la duración de este audiolibro.",
@@ -1009,6 +1026,8 @@
   "ToastCollectionItemsAddFailed": "Artículo(s) añadido(s) a la colección fallido(s)",
   "ToastCollectionRemoveSuccess": "Colección quitada",
   "ToastCollectionUpdateSuccess": "Colección actualizada",
+  "ToastConnectionNotAvailable": "Conexión no disponible. Intenta de nuevo más tarde",
+  "ToastCoverSearchFailed": "Cobertura de búsqueda incorrecta",
   "ToastCoverUpdateFailed": "Error al actualizar la cubierta",
   "ToastDateTimeInvalidOrIncomplete": "Fecha y hora no válidas o incompletas",
   "ToastDeleteFileFailed": "Falló la eliminación del archivo",
@@ -1024,6 +1043,8 @@
   "ToastEpisodeDownloadQueueClearSuccess": "Se borró la cola de descargas de los episodios",
   "ToastEpisodeUpdateSuccess": "{0} episodio(s) actualizado(s)",
   "ToastErrorCannotShare": "No se puede compartir de forma nativa en este dispositivo",
+  "ToastFailedToCreate": "Ha fallado al crear",
+  "ToastFailedToDelete": "Ha fallado al eliminar",
   "ToastFailedToLoadData": "Error al cargar data",
   "ToastFailedToMatch": "Error al emparejar",
   "ToastFailedToShare": "Error al compartir",
@@ -1031,6 +1052,7 @@
   "ToastInvalidImageUrl": "URL de la imagen no válida",
   "ToastInvalidMaxEpisodesToDownload": "Número máximo de episodios para descargar no válidos",
   "ToastInvalidUrl": "URL no válida",
+  "ToastInvalidUrls": "Una o más URL son inválidas",
   "ToastItemCoverUpdateSuccess": "Cubierta del elemento actualizada",
   "ToastItemDeletedFailed": "Error al eliminar el elemento",
   "ToastItemDeletedSuccess": "Elemento borrado",
@@ -1055,6 +1077,7 @@
   "ToastMustHaveAtLeastOnePath": "Debe tener al menos una ruta",
   "ToastNameEmailRequired": "Son obligatorios el nombre y el correo electrónico",
   "ToastNameRequired": "Nombre obligatorio",
+  "ToastNewApiKeyUserError": "Debe seleccionar un usuario",
   "ToastNewEpisodesFound": "{0} nuevo(s) episodio(s) encontrado(s)",
   "ToastNewUserCreatedFailed": "No se pudo crear la cuenta: «{0}»",
   "ToastNewUserCreatedSuccess": "Nueva cuenta creada",
@@ -1093,8 +1116,8 @@
   "ToastRemoveFailed": "Error al eliminar",
   "ToastRemoveItemFromCollectionFailed": "Error al eliminar el elemento de la colección",
   "ToastRemoveItemFromCollectionSuccess": "Elemento eliminado de la colección",
-  "ToastRemoveItemsWithIssuesFailed": "Error en la eliminación de artículos de biblioteca incorrectos",
-  "ToastRemoveItemsWithIssuesSuccess": "Se eliminaron artículos de biblioteca incorrectos",
+  "ToastRemoveItemsWithIssuesFailed": "Error en la eliminación de artículos de biblioteca con incidencias",
+  "ToastRemoveItemsWithIssuesSuccess": "Se eliminaron artículos de biblioteca con incidencias",
   "ToastRenameFailed": "Error al cambiar el nombre",
   "ToastRescanFailed": "Error al volver a escanear para {0}",
   "ToastRescanRemoved": "Se eliminó el elemento reescaneado",
@@ -1133,6 +1156,7 @@
   "ToastUserRootRequireName": "Debe introducir un nombre de usuario administrativo",
   "TooltipAddChapters": "Añadir capítulo(s)",
   "TooltipAddOneSecond": "Añadir 1 segundo",
+  "TooltipAdjustChapterStart": "Pulse para ajustar la hora de inicio",
   "TooltipLockAllChapters": "Bloquear todos los capítulos",
   "TooltipLockChapter": "Bloquear capítulo (Mayús+clic para rango)",
   "TooltipSubtractOneSecond": "Restar 1 segundo",

client/strings/fr.json

@@ -622,7 +622,7 @@
   "LabelSettingsStoreMetadataWithItemHelp": "Par défaut, les fichiers de métadonnées sont stockés dans /metadata/items. En activant ce paramètre, les fichiers de métadonnées seront stockés dans les dossiers des éléments de votre bibliothèque",
   "LabelSettingsTimeFormat": "Format d’heure",
   "LabelShare": "Partager",
-  "LabelShareDownloadableHelp": "Permet aux utilisateurs de télécharger un fichier ZIP de l'élément de la bibliothèque.",
+  "LabelShareDownloadableHelp": "Permet aux utilisateurs disposant du lien de partage de télécharger un fichier zip contenant l'élément de la bibliothèque.",
   "LabelShareOpen": "Ouvrir le partage",
   "LabelShareURL": "Partager l’URL",
   "LabelShowAll": "Tout afficher",

client/strings/hu.json

@@ -16,7 +16,7 @@
   "ButtonBrowseForFolder": "Mappa keresése",
   "ButtonCancel": "Mégse",
   "ButtonCancelEncode": "Kódolás megszakítása",
-  "ButtonChangeRootPassword": "Gyökérjelszó megváltoztatása",
+  "ButtonChangeRootPassword": "Root jelszó megváltoztatása",
   "ButtonCheckAndDownloadNewEpisodes": "Új epizódok ellenőrzése és letöltése",
   "ButtonChooseAFolder": "Válassz egy mappát",
   "ButtonChooseFiles": "Fájlok kiválasztása",

client/strings/it.json

@@ -34,7 +34,7 @@
   "ButtonEditChapters": "Modifica Capitoli",
   "ButtonEditPodcast": "Modifica Podcast",
   "ButtonEnable": "Abilita",
-  "ButtonFireAndFail": "Fire and Fail",
+  "ButtonFireAndFail": "Centro e fallimento",
   "ButtonFireOnTest": "Fire onTest event",
   "ButtonForceReScan": "Forza Re-Scan",
   "ButtonFullPath": "Percorso Completo",
@@ -182,7 +182,7 @@
   "HeaderPlaylist": "Playlist",
   "HeaderPlaylistItems": "Elementi della playlist",
   "HeaderPodcastsToAdd": "Podcasts da Aggiungere",
-  "HeaderPresets": "Presets",
+  "HeaderPresets": "Preimpostazioni",
   "HeaderPreviewCover": "Anteprima Cover",
   "HeaderRSSFeedGeneral": "Dettagli RSS",
   "HeaderRSSFeedIsOpen": "RSS Feed è aperto",
@@ -306,7 +306,7 @@
   "LabelCustomCronExpression": "Espressione Cron personalizzata:",
   "LabelDatetime": "Data & Ora",
   "LabelDays": "Giorni",
-  "LabelDeleteFromFileSystemCheckbox": "Elimina dal file system (togli la spunta per eliminarla solo dal DB)",
+  "LabelDeleteFromFileSystemCheckbox": "Elimina dal file system (despunta per rimuoverla solo dal database)",
   "LabelDescription": "Descrizione",
   "LabelDeselectAll": "Deseleziona Tutto",
   "LabelDetectedPattern": "Trovato pattern:",
@@ -436,9 +436,9 @@
   "LabelLibraryFilterSublistEmpty": "Nessuno {0}",
   "LabelLibraryItem": "Elementi della biblioteca",
   "LabelLibraryName": "Nome della biblioteca",
-  "LabelLibrarySortByProgress": "Progressi: Ultimi aggiornamenti",
-  "LabelLibrarySortByProgressFinished": "Progressi: Completati",
-  "LabelLibrarySortByProgressStarted": "Progressi: Iniziati",
+  "LabelLibrarySortByProgress": "Progresso: ultimo aggiornamento",
+  "LabelLibrarySortByProgressFinished": "Progresso: finito",
+  "LabelLibrarySortByProgressStarted": "Progresso: iniziato",
   "LabelLimit": "Limiti",
   "LabelLineSpacing": "Interlinea",
   "LabelListenAgain": "Ascolta ancora",
@@ -497,7 +497,7 @@
   "LabelNumberOfBooks": "Numero di libri",
   "LabelNumberOfChapters": "Numero di capitoli:",
   "LabelNumberOfEpisodes": "Numero di episodi",
-  "LabelOpenIDAdvancedPermsClaimDescription": "Nome dell'attestazione OpenID che contiene autorizzazioni avanzate per le azioni dell'utente all'interno dell'applicazione che verranno applicate ai ruoli non amministratori (<b>se configurato</b>). Se il reclamo manca nella risposta, l'accesso ad ABS verrà negato. Se manca una singola opzione, verrà trattata come<code>falsa</code>. Assicurati che l'attestazione del provider di identità corrisponda alla struttura prevista:",
+  "LabelOpenIDAdvancedPermsClaimDescription": "Nome dell'attestazione OpenID che contiene autorizzazioni avanzate per le azioni dell'utente all'interno dell'applicazione che verranno applicate ai ruoli non amministrativi (<b>se configurato</b>). Se il reclamo manca nella risposta, l'accesso ad ABS verrà negato. Se manca una singola opzione, verrà trattata come <code>falso</code>. Assicurati che l'attestazione del provider di identità corrisponda alla struttura prevista:",
   "LabelOpenIDClaims": "Lasciare vuote le seguenti opzioni per disabilitare l'assegnazione avanzata di gruppi e autorizzazioni, assegnando quindi automaticamente il gruppo \"Utente\".",
   "LabelOpenIDGroupClaimDescription": "Nome dell'attestazione OpenID che contiene un elenco dei gruppi dell'utente. Comunemente indicato come <code>gruppo</code>. <b>se configurato</b>, l'applicazione assegnerà automaticamente i ruoli in base alle appartenenze ai gruppi dell'utente, a condizione che tali gruppi siano denominati \"admin\", \"utente\" o \"ospite\" senza distinzione tra maiuscole e minuscole nell'attestazione. L'attestazione deve contenere un elenco e, se un utente appartiene a più gruppi, l'applicazione assegnerà il ruolo corrispondente al livello di accesso più alto. Se nessun gruppo corrisponde, l'accesso verrà negato.",
   "LabelOpenRSSFeed": "Apri RSS Feed",
@@ -530,7 +530,7 @@
   "LabelPrimaryEbook": "Libro principale",
   "LabelProgress": "Cominciati",
   "LabelProvider": "Fornitore",
-  "LabelProviderAuthorizationValue": "Authorization Header Value",
+  "LabelProviderAuthorizationValue": "Valore intestazione di autorizzazione",
   "LabelPubDate": "Data di pubblicazione",
   "LabelPublishYear": "Anno di pubblicazione",
   "LabelPublishedDate": "Pubblicati {0}",
@@ -674,7 +674,7 @@
   "LabelTimeDurationXMinutes": "{0} minuti",
   "LabelTimeDurationXSeconds": "{0} secondi",
   "LabelTimeInMinutes": "Tempo in minuti",
-  "LabelTimeLeft": "{0} sinistra",
+  "LabelTimeLeft": "{0} rimasti",
   "LabelTimeListened": "Tempo di Ascolto",
   "LabelTimeListenedToday": "Tempo di Ascolto Oggi",
   "LabelTimeRemaining": "{0} rimanente",
@@ -682,7 +682,7 @@
   "LabelTitle": "Titolo",
   "LabelToolsEmbedMetadata": "Incorpora Metadata",
   "LabelToolsEmbedMetadataDescription": "Incorpora i metadati nei file audio, inclusi l'immagine di copertina e i capitoli.",
-  "LabelToolsM4bEncoder": "M4B Encoder",
+  "LabelToolsM4bEncoder": "Codificatore M4B",
   "LabelToolsMakeM4b": "Crea un file M4B",
   "LabelToolsMakeM4bDescription": "Genera un file audiolibro M4B con metadati incorporati, immagine di copertina e capitoli.",
   "LabelToolsSplitM4b": "Converti M4B in MP3",
@@ -854,7 +854,7 @@
   "MessageNoItems": "Nessun oggetto",
   "MessageNoItemsFound": "Nessun oggetto trovato",
   "MessageNoListeningSessions": "Nessuna sessione di ascolto",
-  "MessageNoLogs": "Nessun Log",
+  "MessageNoLogs": "Nessun rapporto",
   "MessageNoMediaProgress": "Nessun progresso multimediale",
   "MessageNoNotifications": "Nessuna notifica",
   "MessageNoPodcastFeed": "Podcast non valido: nessun feed",
@@ -1109,7 +1109,7 @@
   "ToastProgressIsNotBeingSynced": "L'avanzamento non è sincronizzato, riavviare la riproduzione",
   "ToastProviderCreatedFailed": "Impossibile aggiungere il provider",
   "ToastProviderCreatedSuccess": "Aggiunto nuovo provider",
-  "ToastProviderNameAndUrlRequired": "Nome e URL richiesti",
+  "ToastProviderNameAndUrlRequired": "Nome e Url richiesti",
   "ToastProviderRemoveSuccess": "Provider rimosso",
   "ToastRSSFeedCloseFailed": "Errore chiusura flusso RSS",
   "ToastRSSFeedCloseSuccess": "Flusso RSS chiuso",

client/strings/nl.json

@@ -2,7 +2,7 @@
   "ButtonAdd": "Toevoegen",
   "ButtonAddApiKey": "API Key toevoegen",
   "ButtonAddChapters": "Hoofdstukken toevoegen",
-  "ButtonAddDevice": "Toestel toevoegen",
+  "ButtonAddDevice": "Apparaat toevoegen",
   "ButtonAddLibrary": "Bibliotheek toevoegen",
   "ButtonAddPodcasts": "Podcasts toevoegen",
   "ButtonAddUser": "Gebruiker toevoegen",
@@ -139,7 +139,7 @@
   "HeaderCustomMetadataProviders": "Aangepaste Metadata Providers",
   "HeaderDetails": "Details",
   "HeaderDownloadQueue": "Download-wachtrij",
-  "HeaderEbookFiles": "Ebook bestanden",
+  "HeaderEbookFiles": "E-book bestanden",
   "HeaderEmail": "E-mail",
   "HeaderEmailSettings": "E-mail instellingen",
   "HeaderEpisodes": "Afleveringen",
@@ -275,7 +275,7 @@
   "LabelBonus": "Bonus",
   "LabelBooks": "Boeken",
   "LabelButtonText": "Knop Tekst",
-  "LabelByAuthor": "Door {0}",
+  "LabelByAuthor": "door {0}",
   "LabelChangePassword": "Wachtwoord wijzigen",
   "LabelChannels": "Kanalen",
   "LabelChapterCount": "{0} Hoofdstukken",
@@ -383,7 +383,7 @@
   "LabelFolders": "Mappen",
   "LabelFontBold": "Vetgedrukt",
   "LabelFontBoldness": "Lettertype Dikte",
-  "LabelFontFamily": "Lettertypefamilie",
+  "LabelFontFamily": "Letterfamilie",
   "LabelFontItalic": "Cursief",
   "LabelFontScale": "Lettertype schaal",
   "LabelFontStrikethrough": "Doorgestreept",
@@ -436,9 +436,9 @@
   "LabelLibraryFilterSublistEmpty": "Nee {0}",
   "LabelLibraryItem": "Bibliotheekonderdeel",
   "LabelLibraryName": "Bibliotheeknaam",
-  "LabelLibrarySortByProgress": "Voortuigang geüpdatet",
-  "LabelLibrarySortByProgressFinished": "Datum voltooid",
-  "LabelLibrarySortByProgressStarted": "Datum gestart",
+  "LabelLibrarySortByProgress": "Voortgang: Laatst geüpdatet",
+  "LabelLibrarySortByProgressFinished": "Voortgang: Voltooid",
+  "LabelLibrarySortByProgressStarted": "Voortgang: Gestart",
   "LabelLimit": "Limiet",
   "LabelLineSpacing": "Regelruimte",
   "LabelListenAgain": "Opnieuw Beluisteren",
@@ -588,8 +588,8 @@
   "LabelSettingsBookshelfViewHelp": "Skeumorphisch design met houten planken",
   "LabelSettingsChromecastSupport": "Chromecast ondersteuning",
   "LabelSettingsDateFormat": "Datumnotatie",
-  "LabelSettingsEnableWatcher": "Bibliotheken automatisch scannen op wijzigingen",
-  "LabelSettingsEnableWatcherForLibrary": "Bibliotheek automatisch scannen op wijzigingen",
+  "LabelSettingsEnableWatcher": "Bibliotheken automatisch monitoren op wijzigingen",
+  "LabelSettingsEnableWatcherForLibrary": "Bibliotheek automatisch monitoren op wijzigingen",
   "LabelSettingsEnableWatcherHelp": "Zorgt voor het automatisch toevoegen/bijwerken van onderdelen als bestandswijzigingen worden gedetecteerd. *Vereist herstarten van server",
   "LabelSettingsEpubsAllowScriptedContent": "Sta scripted content toe in epubs",
   "LabelSettingsEpubsAllowScriptedContentHelp": "Sta toe dat epub-bestanden scripts uitvoeren. Het wordt aanbevolen om deze instelling uitgeschakeld te houden, tenzij u de bron van de epub-bestanden vertrouwt.",
@@ -888,7 +888,7 @@
   "MessageResetChaptersConfirm": "Weet je zeker dat je de hoofdstukken wil resetten en de wijzigingen die je gemaakt hebt ongedaan wil maken?",
   "MessageRestoreBackupConfirm": "Weet je zeker dat je wil herstellen met behulp van de back-up gemaakt op",
   "MessageRestoreBackupWarning": "Een back-up herstellen zal de volledige database in /config en de omslagen in /metadata/items & /metadata/authors overschrijven.<br /><br />Back-ups wijzigen geen bestanden in je bibliotheekmappen. Als je de serverinstelling gebruikt om omslagen en metadata in je bibliotheekmappen te bewaren dan worden deze niet geback-upt of overschreven.<br /><br />Alle apparaten die je server gebruiken, worden automatisch ververst.",
-  "MessageScheduleLibraryScanNote": "Voor de meeste gebruikers is het raadzaam om deze functie uitgeschakeld te laten en de folder watcher-instelling ingeschakeld te houden. De folder watcher detecteert automatisch wijzigingen in uw bibliotheekmappen. De folder watcher werkt niet voor elk bestandssysteem (zoals NFS), dus geplande bibliotheekscans kunnen in plaats daarvan worden gebruikt.",
+  "MessageScheduleLibraryScanNote": "Voor de meeste gebruikers is het aangeraden om deze functie uitgeschakeld te laten en de \"Bibliotheek automatisch monitoren op wijzigingen\" instelling ingeschakeld te houden - deze detecteert automatisch wijzigingen in uw bibliotheekmappen. Activeer deze instelling als \"Bibliotheek automatisch monitoren op wijzigingen\" niet werkt voor uw bestandssysteem (zoals NFS).",
   "MessageScheduleRunEveryWeekdayAtTime": "Elke {0} uitvoeren op {1}",
   "MessageSearchResultsFor": "Zoekresultaten voor",
   "MessageSelected": "{0} geselecteerd",
@@ -1026,6 +1026,8 @@
   "ToastCollectionItemsAddFailed": "Item(s) toegevoegd aan collectie mislukt",
   "ToastCollectionRemoveSuccess": "Collectie verwijderd",
   "ToastCollectionUpdateSuccess": "Collectie bijgewerkt",
+  "ToastConnectionNotAvailable": "Verbinding niet beschikbaar. Gelieve later opnieuw te proberen",
+  "ToastCoverSearchFailed": "Omslag zoeken mislukt",
   "ToastCoverUpdateFailed": "Omslag bijwerken mislukt",
   "ToastDateTimeInvalidOrIncomplete": "Datum en tijd ongeldig of onvolledig",
   "ToastDeleteFileFailed": "Bestand verwijderen mislukt",

client/strings/ru.json

@@ -392,7 +392,7 @@
   "LabelGenre": "Жанр",
   "LabelGenres": "Жанры",
   "LabelHardDeleteFile": "Жесткое удаление файла",
-  "LabelHasEbook": "Есть e-книга",
+  "LabelHasEbook": "Есть электронная книга",
   "LabelHasSupplementaryEbook": "Есть дополнительная e-книга",
   "LabelHideSubtitles": "Скрыть серии",
   "LabelHighestPriority": "Наивысший приоритет",
@@ -437,8 +437,8 @@
   "LabelLibraryItem": "Элемент библиотеки",
   "LabelLibraryName": "Имя библиотеки",
   "LabelLibrarySortByProgress": "Прогресс: Последнее обновление",
-  "LabelLibrarySortByProgressFinished": "Прогресс: Завершено",
-  "LabelLibrarySortByProgressStarted": "Прогресс: Начато",
+  "LabelLibrarySortByProgressFinished": "Прогресс: Закончена",
+  "LabelLibrarySortByProgressStarted": "Прогресс: Начата",
   "LabelLimit": "Лимит",
   "LabelLineSpacing": "Межстрочный интервал",
   "LabelListenAgain": "Послушать снова",

client/strings/sk.json

@@ -275,7 +275,7 @@
   "LabelBonus": "Bonus",
   "LabelBooks": "Knihy",
   "LabelButtonText": "Text tlačidla",
-  "LabelByAuthor": "od",
+  "LabelByAuthor": "od {0}",
   "LabelChangePassword": "Zmeniť heslo",
   "LabelChannels": "Kanály",
   "LabelChapterCount": "{0} kapitol",

package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "audiobookshelf",
-  "version": "2.33.0",
+  "version": "2.34.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "audiobookshelf",
-      "version": "2.33.0",
+      "version": "2.34.0",
       "license": "GPL-3.0",
       "dependencies": {
         "axios": "^0.27.2",

package.json

@@ -1,6 +1,6 @@
 {
   "name": "audiobookshelf",
-  "version": "2.33.0",
+  "version": "2.34.0",
   "buildNumber": 1,
   "description": "Self-hosted audiobook and podcast server",
   "main": "index.js",

server/auth/TokenManager.js

@@ -234,6 +234,13 @@ class TokenManager {
       }
 
       const user = await Database.userModel.getUserById(apiKey.userId)
+
+      if (!user?.isActive) {
+        // deny login
+        done(null, null)
+        return
+      }
+
       done(null, user)
     } else {
       // JWT based authentication

server/controllers/AuthorController.js

@@ -10,7 +10,7 @@ const CacheManager = require('../managers/CacheManager')
 const CoverManager = require('../managers/CoverManager')
 const AuthorFinder = require('../finders/AuthorFinder')
 
-const { reqSupportsWebp, isValidASIN } = require('../utils/index')
+const { reqSupportsWebp, isValidASIN, clampPositiveInt } = require('../utils/index')
 
 const naturalSort = createNewSortInstance({
   comparer: new Intl.Collator(undefined, { numeric: true, sensitivity: 'base' }).compare
@@ -412,8 +412,8 @@ class AuthorController {
 
     const options = {
       format: format || (reqSupportsWebp(req) ? 'webp' : 'jpeg'),
-      height: height ? parseInt(height) : null,
-      width: width ? parseInt(width) : null
+      height: clampPositiveInt(height ? parseInt(height) : null, 4096),
+      width: clampPositiveInt(width ? parseInt(width) : null, 4096)
     }
     return CacheManager.handleAuthorCache(res, authorId, options)
   }

server/controllers/CollectionController.js

@@ -3,6 +3,7 @@ const Sequelize = require('sequelize')
 const Logger = require('../Logger')
 const SocketAuthority = require('../SocketAuthority')
 const Database = require('../Database')
+const htmlSanitizer = require('../utils/htmlSanitizer')
 
 const RssFeedManager = require('../managers/RssFeedManager')
 
@@ -31,13 +32,19 @@ class CollectionController {
   async create(req, res) {
     const reqBody = req.body || {}
 
+    const nameCleaned = htmlSanitizer.stripAllTags(reqBody.name)
+
     // Validation
-    if (!reqBody.name || !reqBody.libraryId) {
+    if (!nameCleaned || !reqBody.libraryId) {
       return res.status(400).send('Invalid collection data')
     }
     if (reqBody.description && typeof reqBody.description !== 'string') {
       return res.status(400).send('Invalid collection description')
     }
+    if (!req.user.checkCanAccessLibrary(reqBody.libraryId)) {
+      Logger.warn(`[CollectionController] User "${req.user.username}" attempted to create collection in inaccessible library ${reqBody.libraryId}`)
+      return res.sendStatus(403)
+    }
     const libraryItemIds = (reqBody.books || []).filter((b) => !!b && typeof b == 'string')
     if (!libraryItemIds.length) {
       return res.status(400).send('Invalid collection data. No books')
@@ -65,7 +72,7 @@ class CollectionController {
       newCollection = await Database.collectionModel.create(
         {
           libraryId: reqBody.libraryId,
-          name: reqBody.name,
+          name: nameCleaned,
           description: reqBody.description || null
         },
         { transaction }
@@ -106,8 +113,9 @@ class CollectionController {
    */
   async findAll(req, res) {
     const collectionsExpanded = await Database.collectionModel.getOldCollectionsJsonExpanded(req.user)
+    const accessibleCollections = collectionsExpanded.filter((c) => req.user.checkCanAccessLibrary(c.libraryId))
     res.json({
-      collections: collectionsExpanded
+      collections: accessibleCollections
     })
   }
 
@@ -145,9 +153,12 @@ class CollectionController {
       collectionUpdatePayload.description = req.body.description
       wasUpdated = true
     }
-    if (req.body.name !== undefined && req.body.name !== req.collection.name) {
-      collectionUpdatePayload.name = req.body.name
-      wasUpdated = true
+    if (req.body.name !== undefined && typeof req.body.name === 'string') {
+      const nameCleaned = htmlSanitizer.stripAllTags(req.body.name)
+      if (nameCleaned !== req.collection.name) {
+        collectionUpdatePayload.name = nameCleaned
+        wasUpdated = true
+      }
     }
 
     if (wasUpdated) {
@@ -425,6 +436,10 @@ class CollectionController {
       if (!collection) {
         return res.status(404).send('Collection not found')
       }
+      if (!req.user.checkCanAccessLibrary(collection.libraryId)) {
+        Logger.warn(`[CollectionController] User "${req.user.username}" attempted to access collection ${collection.id} in inaccessible library ${collection.libraryId}`)
+        return res.status(404).send('Collection not found')
+      }
       req.collection = collection
     }
 

server/controllers/FileSystemController.js

@@ -117,7 +117,7 @@ class FileSystemController {
     filepath = fileUtils.filePathToPOSIX(filepath)
 
     // Ensure filepath is inside library folder (prevents directory traversal)
-    if (!filepath.startsWith(libraryFolder.path)) {
+    if (!fileUtils.isSameOrSubPath(libraryFolder.path, filepath)) {
       Logger.error(`[FileSystemController] Filepath is not inside library folder: ${filepath}`)
       return res.sendStatus(400)
     }

server/controllers/LibraryController.js

@@ -462,7 +462,7 @@ class LibraryController {
               }
             }
             Logger.info(`[LibraryController] Removing library item "${libraryItem.id}" from folder "${folder.path}"`)
-            await this.handleDeleteLibraryItem(libraryItem.id, mediaItemIds)
+            await this.handleDeleteLibraryItem(libraryItem.id, mediaItemIds, req.library.id)
           }
 
           if (authorIds.length) {
@@ -563,7 +563,7 @@ class LibraryController {
         mediaItemIds.push(libraryItem.mediaId)
       }
       Logger.info(`[LibraryController] Removing library item "${libraryItem.id}" from library "${req.library.name}"`)
-      await this.handleDeleteLibraryItem(libraryItem.id, mediaItemIds)
+      await this.handleDeleteLibraryItem(libraryItem.id, mediaItemIds, req.library.id)
     }
 
     // Set PlaybackSessions libraryId to null
@@ -714,7 +714,7 @@ class LibraryController {
         }
       }
       Logger.info(`[LibraryController] Removing library item "${libraryItem.id}" with issue`)
-      await this.handleDeleteLibraryItem(libraryItem.id, mediaItemIds)
+      await this.handleDeleteLibraryItem(libraryItem.id, mediaItemIds, req.library.id)
     }
 
     if (authorIds.length) {
@@ -1435,10 +1435,15 @@ class LibraryController {
     const libraryItems = await Database.libraryItemModel.findAll({
       attributes: ['id', 'libraryId', 'path', 'isFile'],
       where: {
-        id: itemIds
+        id: itemIds,
+        libraryId: req.library.id
       }
     })
 
+    if (libraryItems.length < itemIds.length) {
+      Logger.warn(`[LibraryController] User "${req.user.username}" requested ${itemIds.length} items but only ${libraryItems.length} are in library "${req.library.id}"`)
+    }
+
     Logger.info(`[LibraryController] User "${req.user.username}" requested download for items "${itemIds}"`)
 
     const filename = `LibraryItems-${Date.now()}.zip`

server/controllers/LibraryItemController.js

@@ -1,13 +1,14 @@
 const { Request, Response, NextFunction } = require('express')
 const Path = require('path')
 const fs = require('../libs/fsExtra')
+const cron = require('../libs/nodeCron')
 const uaParserJs = require('../libs/uaParser')
 const Logger = require('../Logger')
 const SocketAuthority = require('../SocketAuthority')
 const Database = require('../Database')
 
 const zipHelpers = require('../utils/zipHelpers')
-const { reqSupportsWebp } = require('../utils/index')
+const { reqSupportsWebp, clampPositiveInt } = require('../utils/index')
 const { ScanResult, AudioMimeType } = require('../utils/constants')
 const { getAudioMimeTypeFromExtname, encodeUriPath } = require('../utils/fileUtils')
 const LibraryItemScanner = require('../scanner/LibraryItemScanner')
@@ -36,6 +37,24 @@ const ShareManager = require('../managers/ShareManager')
  * @typedef {RequestWithUser & RequestEntityObject & RequestLibraryFileObject} LibraryItemControllerRequestWithFile
  */
 
+/**
+ * Enforce per-item access for batch item routes
+ *
+ * @param {RequestWithUser} req
+ * @param {Response} res
+ * @param {import('../models/LibraryItem')[]} libraryItems
+ * @returns {boolean} true if the user may access every item; false if 403 was sent
+ */
+function ensureUserCanAccessLibraryItemsForBatch(req, res, libraryItems) {
+  for (const libraryItem of libraryItems) {
+    if (!req.user.checkCanAccessLibraryItem(libraryItem)) {
+      res.sendStatus(403)
+      return false
+    }
+  }
+  return true
+}
+
 class LibraryItemController {
   constructor() {}
 
@@ -111,7 +130,7 @@ class LibraryItemController {
       }
     }
 
-    await this.handleDeleteLibraryItem(req.libraryItem.id, mediaItemIds)
+    await this.handleDeleteLibraryItem(req.libraryItem.id, mediaItemIds, req.libraryItem.libraryId)
     if (hardDelete) {
       Logger.info(`[LibraryItemController] Deleting library item from file system at "${libraryItemPath}"`)
       await fs.remove(libraryItemPath).catch((error) => {
@@ -202,6 +221,11 @@ class LibraryItemController {
       } else if (mediaPayload.autoDownloadSchedule !== undefined && req.libraryItem.media.autoDownloadSchedule !== mediaPayload.autoDownloadSchedule) {
         isPodcastAutoDownloadUpdated = true
       }
+
+      if (mediaPayload.autoDownloadSchedule && !cron.validate(mediaPayload.autoDownloadSchedule)) {
+        Logger.error(`[LibraryItemController] Invalid auto download schedule cron expression "${mediaPayload.autoDownloadSchedule}" for library item "${req.libraryItem.media.title}"`)
+        return res.status(400).send('Invalid auto download schedule cron expression')
+      }
     }
 
     let hasUpdates = (await req.libraryItem.media.updateFromRequest(mediaPayload)) || mediaPayload.url
@@ -398,8 +422,8 @@ class LibraryItemController {
 
     const options = {
       format: format || (reqSupportsWebp(req) ? 'webp' : 'jpeg'),
-      height: height ? parseInt(height) : null,
-      width: width ? parseInt(width) : null
+      height: clampPositiveInt(height ? parseInt(height) : null, 4096),
+      width: clampPositiveInt(width ? parseInt(width) : null, 4096)
     }
     return CacheManager.handleCoverCache(res, libraryItemId, options)
   }
@@ -547,7 +571,13 @@ class LibraryItemController {
       return res.sendStatus(404)
     }
 
+    // Ensure user has permission to delete these library items
+    if (!ensureUserCanAccessLibraryItemsForBatch(req, res, itemsToDelete)) {
+      return
+    }
+
     const libraryId = itemsToDelete[0].libraryId
+
     for (const libraryItem of itemsToDelete) {
       const libraryItemPath = libraryItem.path
       Logger.info(`[LibraryItemController] (${hardDelete ? 'Hard' : 'Soft'}) deleting Library Item "${libraryItem.media.title}" with id "${libraryItem.id}"`)
@@ -565,7 +595,7 @@ class LibraryItemController {
           authorIds.push(...libraryItem.media.authors.map((au) => au.id))
         }
       }
-      await this.handleDeleteLibraryItem(libraryItem.id, mediaItemIds)
+      await this.handleDeleteLibraryItem(libraryItem.id, mediaItemIds, libraryItem.libraryId)
       if (hardDelete) {
         Logger.info(`[LibraryItemController] Deleting library item from file system at "${libraryItemPath}"`)
         await fs.remove(libraryItemPath).catch((error) => {
@@ -581,6 +611,7 @@ class LibraryItemController {
     }
 
     await Database.resetLibraryIssuesFilterData(libraryId)
+
     res.sendStatus(200)
   }
 
@@ -593,6 +624,11 @@ class LibraryItemController {
    * @param {Response} res
    */
   async batchUpdate(req, res) {
+    if (!req.user.canUpdate) {
+      Logger.warn(`[LibraryItemController] User "${req.user.username}" attempted to batch update without permission`)
+      return res.sendStatus(403)
+    }
+
     const updatePayloads = req.body
     if (!Array.isArray(updatePayloads) || !updatePayloads.length) {
       Logger.error(`[LibraryItemController] Batch update failed. Invalid payload`)
@@ -615,6 +651,11 @@ class LibraryItemController {
       return res.sendStatus(404)
     }
 
+    // Ensure user has permission to update these library items
+    if (!ensureUserCanAccessLibraryItemsForBatch(req, res, libraryItems)) {
+      return
+    }
+
     let itemsUpdated = 0
 
     const seriesIdsRemoved = []
@@ -624,6 +665,11 @@ class LibraryItemController {
       const mediaPayload = updatePayload.mediaPayload
       const libraryItem = libraryItems.find((li) => li.id === updatePayload.id)
 
+      if (libraryItem.isPodcast && mediaPayload.autoDownloadSchedule && !cron.validate(mediaPayload.autoDownloadSchedule)) {
+        Logger.warn(`[LibraryItemController] Invalid auto download schedule cron expression "${mediaPayload.autoDownloadSchedule}" for library item "${libraryItem.media.title}" - skipping update`)
+        continue
+      }
+
       let hasUpdates = await libraryItem.media.updateFromRequest(mediaPayload)
 
       if (libraryItem.isBook && Array.isArray(mediaPayload.metadata?.series)) {
@@ -695,6 +741,10 @@ class LibraryItemController {
     const libraryItems = await Database.libraryItemModel.findAllExpandedWhere({
       id: libraryItemIds
     })
+    // Ensure user has permission to access these library items
+    if (!ensureUserCanAccessLibraryItemsForBatch(req, res, libraryItems)) {
+      return
+    }
     res.json({
       libraryItems: libraryItems.map((li) => li.toOldJSONExpanded())
     })

server/controllers/MiscController.js

@@ -8,7 +8,7 @@ const Database = require('../Database')
 const Watcher = require('../Watcher')
 
 const libraryItemFilters = require('../utils/queries/libraryItemFilters')
-const patternValidation = require('../libs/nodeCron/pattern-validation')
+const cron = require('../libs/nodeCron')
 const { isObject, getTitleIgnorePrefix } = require('../utils/index')
 const { sanitizeFilename } = require('../utils/fileUtils')
 
@@ -605,13 +605,11 @@ class MiscController {
       return res.sendStatus(400)
     }
 
-    try {
-      patternValidation(expression)
-      res.sendStatus(200)
-    } catch (error) {
-      Logger.warn(`[MiscController] Invalid cron expression ${expression}`, error.message)
-      res.status(400).send(error.message)
+    if (!cron.validate(expression)) {
+      Logger.warn(`[MiscController] Invalid cron expression ${expression}`)
+      return res.status(400).send('Invalid cron expression')
     }
+    res.sendStatus(200)
   }
 
   /**

server/controllers/PlaylistController.js

@@ -2,6 +2,7 @@ const { Request, Response, NextFunction } = require('express')
 const Logger = require('../Logger')
 const SocketAuthority = require('../SocketAuthority')
 const Database = require('../Database')
+const htmlSanitizer = require('../utils/htmlSanitizer')
 
 /**
  * @typedef RequestUserObject
@@ -29,12 +30,17 @@ class PlaylistController {
     const reqBody = req.body || {}
 
     // Validation
-    if (!reqBody.name || !reqBody.libraryId) {
+    const nameCleaned = htmlSanitizer.stripAllTags(reqBody.name)
+    if (!nameCleaned || !reqBody.libraryId) {
       return res.status(400).send('Invalid playlist data')
     }
     if (reqBody.description && typeof reqBody.description !== 'string') {
       return res.status(400).send('Invalid playlist description')
     }
+    if (!req.user.checkCanAccessLibrary(reqBody.libraryId)) {
+      Logger.warn(`[PlaylistController] User "${req.user.username}" attempted to create playlist in inaccessible library ${reqBody.libraryId}`)
+      return res.sendStatus(403)
+    }
     const items = reqBody.items || []
     const isPodcast = items.some((i) => i.episodeId)
     const libraryItemIds = new Set()
@@ -84,7 +90,7 @@ class PlaylistController {
         {
           libraryId: reqBody.libraryId,
           userId: req.user.id,
-          name: reqBody.name,
+          name: nameCleaned,
           description: reqBody.description || null
         },
         { transaction }
@@ -131,8 +137,9 @@ class PlaylistController {
    */
   async findAllForUser(req, res) {
     const playlistsForUser = await Database.playlistModel.getOldPlaylistsForUserAndLibrary(req.user.id)
+    const accessiblePlaylists = playlistsForUser.filter((p) => req.user.checkCanAccessLibrary(p.libraryId))
     res.json({
-      playlists: playlistsForUser
+      playlists: accessiblePlaylists
     })
   }
 
@@ -174,7 +181,11 @@ class PlaylistController {
     }
 
     const playlistUpdatePayload = {}
-    if (reqBody.name) playlistUpdatePayload.name = reqBody.name
+
+    const nameCleaned = htmlSanitizer.stripAllTags(reqBody.name)
+    if (nameCleaned) {
+      playlistUpdatePayload.name = nameCleaned
+    }
     if (reqBody.description) playlistUpdatePayload.description = reqBody.description
 
     // Update name and description
@@ -502,6 +513,10 @@ class PlaylistController {
     if (!collection) {
       return res.status(404).send('Collection not found')
     }
+    if (!req.user.checkCanAccessLibrary(collection.libraryId)) {
+      Logger.warn(`[PlaylistController] User "${req.user.username}" attempted to create playlist from collection ${collection.id} in inaccessible library ${collection.libraryId}`)
+      return res.status(404).send('Collection not found')
+    }
     // Expand collection to get library items
     const collectionExpanded = await collection.getOldJsonExpanded(req.user)
     if (!collectionExpanded) {
@@ -567,6 +582,10 @@ class PlaylistController {
         Logger.warn(`[PlaylistController] Playlist ${req.params.id} requested by user ${req.user.id} that is not the owner`)
         return res.sendStatus(403)
       }
+      if (!req.user.checkCanAccessLibrary(playlist.libraryId)) {
+        Logger.warn(`[PlaylistController] User "${req.user.username}" attempted to access playlist ${playlist.id} in inaccessible library ${playlist.libraryId}`)
+        return res.status(404).send('Playlist not found')
+      }
       req.playlist = playlist
     }
 

server/controllers/PodcastController.js

@@ -5,9 +5,10 @@ const SocketAuthority = require('../SocketAuthority')
 const Database = require('../Database')
 
 const fs = require('../libs/fsExtra')
+const cron = require('../libs/nodeCron')
 
 const { getPodcastFeed, findMatchingEpisodes } = require('../utils/podcastUtils')
-const { getFileTimestampsWithIno, filePathToPOSIX } = require('../utils/fileUtils')
+const { getFileTimestampsWithIno, filePathToPOSIX, isSameOrSubPath } = require('../utils/fileUtils')
 const { validateUrl } = require('../utils/index')
 const htmlSanitizer = require('../utils/htmlSanitizer')
 
@@ -46,6 +47,11 @@ class PodcastController {
       return res.status(400).send('Invalid request body. "media" and "media.metadata" are required')
     }
 
+    if (payload.media.autoDownloadSchedule && !cron.validate(payload.media.autoDownloadSchedule)) {
+      Logger.error(`[PodcastController] Invalid auto download schedule cron expression "${payload.media.autoDownloadSchedule}"`)
+      return res.status(400).send('Invalid auto download schedule cron expression')
+    }
+
     const library = await Database.libraryModel.findByIdWithFolders(payload.libraryId)
     if (!library) {
       Logger.error(`[PodcastController] Create: Library not found "${payload.libraryId}"`)
@@ -58,8 +64,18 @@ class PodcastController {
       return res.status(404).send('Folder not found')
     }
 
+    if (typeof payload.path !== 'string' || !payload.path.trim()) {
+      return res.status(400).send('Invalid request body. "path" must be a non-empty string')
+    }
+
+    const libraryFolderPath = filePathToPOSIX(folder.path)
     const podcastPath = filePathToPOSIX(payload.path)
 
+    if (!isSameOrSubPath(libraryFolderPath, podcastPath)) {
+      Logger.error(`[PodcastController] Create: Podcast path is outside library folder "${libraryFolderPath}": "${podcastPath}"`)
+      return res.status(400).send('Podcast path must be inside the selected library folder')
+    }
+
     // Check if a library item with this podcast folder exists already
     const existingLibraryItem =
       (await Database.libraryItemModel.count({
@@ -83,7 +99,7 @@ class PodcastController {
 
     const libraryItemFolderStats = await getFileTimestampsWithIno(podcastPath)
 
-    let relPath = payload.path.replace(folder.fullPath, '')
+    let relPath = podcastPath.replace(libraryFolderPath, '')
     if (relPath.startsWith('/')) relPath = relPath.slice(1)
 
     let newLibraryItem = null
@@ -412,6 +428,12 @@ class PodcastController {
             Logger.debug(`[PodcastController] Sanitized description from "${req.body[key]}" to "${sanitizedDescription}"`)
             req.body[key] = sanitizedDescription
           }
+        } else if (key === 'subtitle' && req.body[key]) {
+          const sanitizedSubtitle = htmlSanitizer.sanitize(req.body[key])
+          if (sanitizedSubtitle !== req.body[key]) {
+            Logger.debug(`[PodcastController] Sanitized subtitle from "${req.body[key]}" to "${sanitizedSubtitle}"`)
+            req.body[key] = sanitizedSubtitle
+          }
         }
 
         updatePayload[key] = req.body[key]

server/controllers/ShareController.js

@@ -53,6 +53,10 @@ class ShareController {
       if (playbackSession) {
         if (mediaItemShare.id === playbackSession.mediaItemShareId) {
           Logger.debug(`[ShareController] Found share playback session ${req.cookies.share_session_id}`)
+          // If ?t was provided, override the cached currentTime
+          if (startTime > 0 && startTime < playbackSession.duration) {
+            playbackSession.currentTime = startTime
+          }
           mediaItemShare.playbackSession = playbackSession.toJSONForClient()
           return res.json(mediaItemShare)
         } else {

server/managers/ApiCacheManager.js

@@ -42,11 +42,14 @@ class ApiCacheManager {
   }
 
   clearUserProgressSlices(modelName, hook) {
-    const removedPersonalized = this.modelsInvalidatingPersonalized.has(modelName) ? this.clearByUrlPattern(/^\/libraries\/[^/]+\/personalized/) : 0
+    let removedPersonalized = 0
+    let removedRecentEpisodes = 0
+    if (this.modelsInvalidatingPersonalized.has(modelName)) {
+      removedPersonalized = this.clearByUrlPattern(/^\/libraries\/[^/]+\/personalized/)
+      removedRecentEpisodes = this.clearByUrlPattern(/^\/libraries\/[^/]+\/recent-episodes/)
+    }
     const removedMe = this.modelsInvalidatingMe.has(modelName) ? this.clearByUrlPattern(/^\/me(\/|\?|$)/) : 0
-    Logger.debug(
-      `[ApiCacheManager] ${modelName}.${hook}: cleared user-progress cache slices (personalized=${removedPersonalized}, me=${removedMe})`
-    )
+    Logger.debug(`[ApiCacheManager] ${modelName}.${hook}: cleared user-progress cache slices (personalized=${removedPersonalized}, recentEpisodes=${removedRecentEpisodes}, me=${removedMe})`)
   }
 
   clear(model, hook) {

server/managers/BackupManager.js

@@ -126,13 +126,31 @@ class BackupManager {
     } catch (error) {
       // Not a valid zip file
       Logger.error('[BackupManager] Failed to read backup file - backup might not be a valid .zip file', tempPath, error)
+      await zip.close().catch(() => {})
+      await fs.remove(tempPath).catch((err) => Logger.error(`[BackupManager] Failed to remove rejected backup file "${tempPath}"`, err))
       return res.status(400).send('Failed to read backup file - backup might not be a valid .zip file')
     }
-    if (!Object.keys(entries).includes('absdatabase.sqlite')) {
+    if (!entries['absdatabase.sqlite']) {
       Logger.error(`[BackupManager] Invalid backup with no absdatabase.sqlite file - might be a backup created on an old Audiobookshelf server.`)
+      await zip.close().catch(() => {})
+      await fs.remove(tempPath).catch((err) => Logger.error(`[BackupManager] Failed to remove rejected backup file "${tempPath}"`, err))
       return res.status(500).send('Invalid backup with no absdatabase.sqlite file - might be a backup created on an old Audiobookshelf server.')
     }
 
+    const detailsEntry = entries['details']
+    if (!detailsEntry) {
+      Logger.error('[BackupManager] Invalid backup - missing details entry')
+      await zip.close().catch(() => {})
+      await fs.remove(tempPath).catch((err) => Logger.error(`[BackupManager] Failed to remove rejected backup file "${tempPath}"`, err))
+      return res.status(400).send('Invalid backup file - missing details entry')
+    }
+    if (detailsEntry.size > 1024 * 1024) {
+      Logger.error(`[BackupManager] Backup details entry too large: ${detailsEntry.size} bytes`)
+      await zip.close().catch(() => {})
+      await fs.remove(tempPath).catch((err) => Logger.error(`[BackupManager] Failed to remove rejected backup file "${tempPath}"`, err))
+      return res.status(400).send('Invalid backup file - details entry too large')
+    }
+
     const data = await zip.entryData('details')
     const details = data.toString('utf8').split('\n')
 
@@ -140,9 +158,13 @@ class BackupManager {
 
     if (!backup.serverVersion) {
       Logger.error(`[BackupManager] Invalid backup with no server version - might be a backup created before version 2.0.0`)
+      await zip.close().catch(() => {})
+      await fs.remove(tempPath).catch((err) => Logger.error(`[BackupManager] Failed to remove rejected backup file "${tempPath}"`, err))
       return res.status(500).send('Invalid backup. Might be a backup created before version 2.0.0.')
     }
 
+    await zip.close().catch(() => {})
+
     backup.fileSize = await getFileSize(backup.fullPath)
 
     const existingBackupIndex = this.backups.findIndex((b) => b.id === backup.id)
@@ -257,9 +279,24 @@ class BackupManager {
           let data = null
           try {
             zip = new StreamZip.async({ file: fullFilePath })
+            const entries = await zip.entries()
+
+            const detailsEntry = entries['details']
+            if (!detailsEntry) {
+              Logger.error(`[BackupManager] Backup "${fullFilePath}" missing details entry - skipping`)
+              await zip.close().catch(() => {})
+              continue
+            }
+            if (detailsEntry.size > 1024 * 1024) {
+              Logger.error(`[BackupManager] Backup "${fullFilePath}" details entry too large (${detailsEntry.size} bytes) - skipping`)
+              await zip.close().catch(() => {})
+              continue
+            }
+
             data = await zip.entryData('details')
           } catch (error) {
             Logger.error(`[BackupManager] Failed to unzip backup "${fullFilePath}"`, error)
+            if (zip) await zip.close().catch(() => {})
             continue
           }
 

server/managers/CronManager.js

@@ -153,6 +153,11 @@ class CronManager {
 
   startPodcastCron(expression, libraryItemIds) {
     try {
+      if (!cron.validate(expression)) {
+        Logger.error(`[CronManager] Invalid auto download schedule cron expression "${expression}" - not starting podcast episode check cron`)
+        return
+      }
+
       Logger.debug(`[CronManager] Scheduling podcast episode check cron "${expression}" for ${libraryItemIds.length} item(s)`)
       const task = cron.schedule(expression, () => {
         if (this.podcastCronExpressionsExecuting.includes(expression)) {
@@ -167,7 +172,7 @@ class CronManager {
         task
       })
     } catch (error) {
-      Logger.error(`[PodcastManager] Failed to schedule podcast cron ${this.serverSettings.podcastEpisodeSchedule}`, error)
+      Logger.error(`[PodcastManager] Failed to schedule podcast cron ${expression}`, error)
     }
   }
 

server/models/Author.js

@@ -111,16 +111,17 @@ class Author extends Model {
    *
    * @param {string} name
    * @param {string} libraryId
-   * @returns {Promise<Author>}
+   * @returns {Promise<{ author: Author, created: boolean }>}
    */
   static async findOrCreateByNameAndLibrary(name, libraryId) {
     const author = await this.getByNameAndLibrary(name, libraryId)
-    if (author) return author
-    return this.create({
+    if (author) return { author, created: false }
+    const newAuthor = await this.create({
       name,
       lastFirst: this.getLastFirst(name),
       libraryId
     })
+    return { author: newAuthor, created: true }
   }
 
   /**

server/models/Book.js

@@ -4,6 +4,7 @@ const { getTitlePrefixAtEnd, getTitleIgnorePrefix } = require('../utils')
 const parseNameString = require('../utils/parsers/parseNameString')
 const htmlSanitizer = require('../utils/htmlSanitizer')
 const libraryItemsBookFilters = require('../utils/queries/libraryItemsBookFilters')
+const SocketAuthority = require('../SocketAuthority')
 
 /**
  * @typedef EBookFileObject
@@ -470,13 +471,23 @@ class Book extends Model {
 
     for (const author of authorsRemoved) {
       await bookAuthorModel.removeByIds(author.id, this.id)
+      const numBooks = await bookAuthorModel.getCountForAuthor(author.id)
+      if (numBooks > 0) {
+        SocketAuthority.emitter('author_updated', author.toOldJSONExpanded(numBooks))
+      }
       Logger.debug(`[Book] "${this.title}" Removed author "${author.name}"`)
       this.authors = this.authors.filter((au) => au.id !== author.id)
     }
     const authorsAdded = []
     for (const authorName of newAuthorNames) {
-      const author = await authorModel.findOrCreateByNameAndLibrary(authorName, libraryId)
+      const { author, created } = await authorModel.findOrCreateByNameAndLibrary(authorName, libraryId)
       await bookAuthorModel.create({ bookId: this.id, authorId: author.id })
+      if (created) {
+        SocketAuthority.emitter('author_added', author.toOldJSON())
+      } else {
+        const numBooks = await bookAuthorModel.getCountForAuthor(author.id)
+        SocketAuthority.emitter('author_updated', author.toOldJSONExpanded(numBooks))
+      }
       Logger.debug(`[Book] "${this.title}" Added author "${author.name}"`)
       this.authors.push(author)
       authorsAdded.push(author)

server/models/Podcast.js

@@ -78,6 +78,7 @@ class Podcast extends Model {
    */
   static async createFromRequest(payload, transaction) {
     const title = typeof payload.metadata.title === 'string' ? payload.metadata.title : null
+    // cron expression validated in controller
     const autoDownloadSchedule = typeof payload.autoDownloadSchedule === 'string' ? payload.autoDownloadSchedule : null
     const genres = Array.isArray(payload.metadata.genres) && payload.metadata.genres.every((g) => typeof g === 'string' && g.length) ? payload.metadata.genres : []
     const tags = Array.isArray(payload.tags) && payload.tags.every((t) => typeof t === 'string' && t.length) ? payload.tags : []
@@ -89,6 +90,9 @@ class Podcast extends Model {
       }
     })
 
+    const rawDescription = typeof payload.metadata.description === 'string' ? payload.metadata.description : null
+    const description = rawDescription ? htmlSanitizer.sanitize(rawDescription) : null
+
     return this.create(
       {
         title,
@@ -97,7 +101,7 @@ class Podcast extends Model {
         releaseDate: typeof payload.metadata.releaseDate === 'string' ? payload.metadata.releaseDate : null,
         feedURL: typeof payload.metadata.feedUrl === 'string' ? payload.metadata.feedUrl : null,
         imageURL: typeof payload.metadata.imageUrl === 'string' ? payload.metadata.imageUrl : null,
-        description: typeof payload.metadata.description === 'string' ? payload.metadata.description : null,
+        description,
         itunesPageURL: typeof payload.metadata.itunesPageUrl === 'string' ? payload.metadata.itunesPageUrl : null,
         itunesId: typeof payload.metadata.itunesId === 'string' ? payload.metadata.itunesId : null,
         itunesArtistId: typeof payload.metadata.itunesArtistId === 'string' ? payload.metadata.itunesArtistId : null,
@@ -270,6 +274,7 @@ class Podcast extends Model {
       hasUpdates = true
     }
     if (typeof payload.autoDownloadSchedule === 'string' && payload.autoDownloadSchedule !== this.autoDownloadSchedule) {
+      // cron expression validated in controller
       this.autoDownloadSchedule = payload.autoDownloadSchedule
       hasUpdates = true
     }

server/objects/PlaybackSession.js

@@ -110,7 +110,8 @@ class PlaybackSession {
       startedAt: this.startedAt,
       updatedAt: this.updatedAt,
       audioTracks: this.audioTracks.map((at) => at.toJSON?.() || { ...at }),
-      libraryItem: libraryItem?.toOldJSONExpanded() || null
+      libraryItem: libraryItem?.toOldJSONExpanded() || null,
+      coverAspectRatio: this.coverAspectRatio !== null ? this.coverAspectRatio : undefined // Used for share sessions
     }
   }
 

server/objects/Stream.js

@@ -73,7 +73,7 @@ class Stream extends EventEmitter {
     return [AudioMimeType.FLAC, AudioMimeType.OPUS, AudioMimeType.WMA, AudioMimeType.AIFF, AudioMimeType.WEBM, AudioMimeType.WEBMA, AudioMimeType.AWB, AudioMimeType.CAF]
   }
   get codecsToForceAAC() {
-    return ['alac', 'ac3', 'eac3']
+    return ['alac', 'ac3', 'eac3', 'opus']
   }
   get userToken() {
     return this.user.token

server/routers/ApiRouter.js

@@ -363,8 +363,9 @@ class ApiRouter {
    * Remove library item and associated entities
    * @param {string} libraryItemId
    * @param {string[]} mediaItemIds array of bookId or podcastEpisodeId
+   * @param {string} libraryId
    */
-  async handleDeleteLibraryItem(libraryItemId, mediaItemIds) {
+  async handleDeleteLibraryItem(libraryItemId, mediaItemIds, libraryId) {
     const numProgressRemoved = await Database.mediaProgressModel.destroy({
       where: {
         mediaItemId: mediaItemIds
@@ -395,7 +396,8 @@ class ApiRouter {
     await Database.libraryItemModel.removeById(libraryItemId)
 
     SocketAuthority.emitter('item_removed', {
-      id: libraryItemId
+      id: libraryItemId,
+      libraryId
     })
   }
 

server/utils/constants.js

@@ -48,6 +48,8 @@ module.exports.AudioMimeType = {
   AIF: 'audio/x-aiff',
   WEBM: 'audio/webm',
   WEBMA: 'audio/webm',
+  // TODO: Switch to `audio/matroska`? marked as deprecated in IANA registry
+  // ref: https://datatracker.ietf.org/doc/html/rfc9559
   MKA: 'audio/x-matroska',
   AWB: 'audio/amr-wb',
   CAF: 'audio/x-caf',

server/utils/ffmpegHelpers.js

@@ -1,4 +1,5 @@
 const axios = require('axios')
+const ssrfFilter = require('ssrf-req-filter')
 const Ffmpeg = require('../libs/fluentFfmpeg')
 const ffmpgegUtils = require('../libs/fluentFfmpeg/utils')
 const fs = require('../libs/fsExtra')
@@ -97,6 +98,8 @@ async function resizeImage(filePath, outputPath, width, height) {
 module.exports.resizeImage = resizeImage
 
 /**
+ * Download podcast episode
+ * Uses SSRF filter to prevent internal URLs
  *
  * @param {import('../objects/PodcastEpisodeDownload')} podcastEpisodeDownload
  * @returns {Promise<{success: boolean, isRequestError?: boolean}>}
@@ -121,7 +124,9 @@ module.exports.downloadPodcastEpisode = (podcastEpisodeDownload) => {
             Accept: '*/*',
             'User-Agent': userAgent
           },
-          timeout: global.PodcastDownloadTimeout
+          timeout: global.PodcastDownloadTimeout,
+          httpAgent: global.DisableSsrfRequestFilter?.(podcastEpisodeDownload.url) ? null : ssrfFilter(podcastEpisodeDownload.url),
+          httpsAgent: global.DisableSsrfRequestFilter?.(podcastEpisodeDownload.url) ? null : ssrfFilter(podcastEpisodeDownload.url)
         })
 
         Logger.debug(`[ffmpegHelpers] Successfully connected with User-Agent: ${userAgent}`)

server/utils/index.js

@@ -54,6 +54,16 @@ module.exports.isNullOrNaN = (num) => {
   return num === null || isNaN(num)
 }
 
+/**
+ * @param {number|null|undefined} value
+ * @param {number} max
+ * @returns {number|null}
+ */
+module.exports.clampPositiveInt = (value, max) => {
+  if (value == null || !Number.isFinite(value) || value <= 0) return null
+  return Math.min(Math.floor(value), max)
+}
+
 const xmlToJSON = (xml) => {
   return new Promise((resolve, reject) => {
     parseString(xml, (err, results) => {

server/utils/podcastUtils.js

@@ -217,6 +217,10 @@ function extractEpisodeData(item) {
     episode[cleanKey] = extractFirstArrayItemString(item, key)
   })
 
+  if (episode.subtitle) {
+    episode.subtitle = htmlSanitizer.sanitize(episode.subtitle.trim())
+  }
+
   // Extract psc:chapters if duration is set
   episode.durationSeconds = episode.duration ? timestampToSeconds(episode.duration) : null
 

test/server/controllers/LibraryItemController.test.js

@@ -123,7 +123,9 @@ describe('LibraryItemController', () => {
       const fakeReq = {
         query: {},
         user: {
-          canDelete: true
+          username: 'test',
+          canDelete: true,
+          checkCanAccessLibraryItem: () => true
         },
         body: {
           libraryItemIds: [libraryItem1Id]
@@ -199,4 +201,102 @@ describe('LibraryItemController', () => {
       expect(series2Exists).to.be.true
     })
   })
+
+  describe('batch item access control', () => {
+    let lib1Id
+    let itemLib1Id
+    let itemLib2Id
+
+    beforeEach(async () => {
+      const lib1 = await Database.libraryModel.create({ name: 'Lib 1', mediaType: 'book' })
+      const folder1 = await Database.libraryFolderModel.create({ path: '/l1', libraryId: lib1.id })
+      const book1 = await Database.bookModel.create({ title: 'B1', audioFiles: [], tags: [], narrators: [], genres: [], chapters: [] })
+      const li1 = await Database.libraryItemModel.create({
+        libraryFiles: [],
+        mediaId: book1.id,
+        mediaType: 'book',
+        libraryId: lib1.id,
+        libraryFolderId: folder1.id
+      })
+      lib1Id = lib1.id
+      itemLib1Id = li1.id
+
+      const lib2 = await Database.libraryModel.create({ name: 'Lib 2', mediaType: 'book' })
+      const folder2 = await Database.libraryFolderModel.create({ path: '/l2', libraryId: lib2.id })
+      const book2 = await Database.bookModel.create({ title: 'B2', audioFiles: [], tags: [], narrators: [], genres: [], chapters: [] })
+      const li2 = await Database.libraryItemModel.create({
+        libraryFiles: [],
+        mediaId: book2.id,
+        mediaType: 'book',
+        libraryId: lib2.id,
+        libraryFolderId: folder2.id
+      })
+      itemLib2Id = li2.id
+    })
+
+    const userLimitedToLib1 = () => ({
+      username: 'limited',
+      canDelete: true,
+      canUpdate: true,
+      checkCanAccessLibraryItem(li) {
+        return li.libraryId === lib1Id
+      }
+    })
+
+    it('batchGet returns 403 for a library item the user cannot access', async () => {
+      const fakeRes = { sendStatus: sinon.spy(), json: sinon.spy() }
+      const fakeReq = {
+        body: { libraryItemIds: [itemLib2Id] },
+        user: userLimitedToLib1()
+      }
+      await LibraryItemController.batchGet.bind(apiRouter)(fakeReq, fakeRes)
+      expect(fakeRes.sendStatus.calledWith(403)).to.be.true
+    })
+
+    it('batchGet returns items when the user can access them', async () => {
+      const fakeRes = { sendStatus: sinon.spy(), json: sinon.spy() }
+      const fakeReq = {
+        body: { libraryItemIds: [itemLib1Id] },
+        user: userLimitedToLib1()
+      }
+      await LibraryItemController.batchGet.bind(apiRouter)(fakeReq, fakeRes)
+      expect(fakeRes.json.calledOnce).to.be.true
+      const payload = fakeRes.json.firstCall.args[0]
+      expect(payload.libraryItems).to.have.length(1)
+      expect(payload.libraryItems[0].id).to.equal(itemLib1Id)
+    })
+
+    it('batchUpdate returns 403 for a library item the user cannot access', async () => {
+      const fakeRes = { sendStatus: sinon.spy(), json: sinon.spy() }
+      const fakeReq = {
+        user: userLimitedToLib1(),
+        body: [{ id: itemLib2Id, mediaPayload: {} }]
+      }
+      await LibraryItemController.batchUpdate.bind(apiRouter)(fakeReq, fakeRes)
+      expect(fakeRes.sendStatus.calledWith(403)).to.be.true
+    })
+
+    it('batchUpdate returns 403 when the user lacks canUpdate', async () => {
+      const u = userLimitedToLib1()
+      u.canUpdate = false
+      const fakeRes = { sendStatus: sinon.spy(), json: sinon.spy() }
+      const fakeReq = {
+        user: u,
+        body: [{ id: itemLib1Id, mediaPayload: {} }]
+      }
+      await LibraryItemController.batchUpdate.bind(apiRouter)(fakeReq, fakeRes)
+      expect(fakeRes.sendStatus.calledWith(403)).to.be.true
+    })
+
+    it('batchDelete returns 403 for a library item the user cannot access', async () => {
+      const fakeRes = { sendStatus: sinon.spy() }
+      const fakeReq = {
+        query: {},
+        user: userLimitedToLib1(),
+        body: { libraryItemIds: [itemLib2Id] }
+      }
+      await LibraryItemController.batchDelete.bind(apiRouter)(fakeReq, fakeRes)
+      expect(fakeRes.sendStatus.calledWith(403)).to.be.true
+    })
+  })
 })

test/server/managers/ApiCacheManager.test.js

@@ -1,6 +1,7 @@
 // Import dependencies and modules for testing
 const { expect } = require('chai')
 const sinon = require('sinon')
+const { LRUCache } = require('lru-cache')
 const ApiCacheManager = require('../../../server/managers/ApiCacheManager')
 
 describe('ApiCacheManager', () => {
@@ -94,4 +95,17 @@ describe('ApiCacheManager', () => {
       expect(res.originalSend.calledWith(body)).to.be.true
     })
   })
+
+  describe('clear on mediaProgress', () => {
+    it('should remove recent-episodes cache entries', () => {
+      const key = JSON.stringify({ user: 'u', url: '/libraries/abc-123/recent-episodes?limit=50&page=0' })
+      const cache = new LRUCache({ max: 10 })
+      cache.set(key, { body: '[]', headers: {}, statusCode: 200 })
+      const manager = new ApiCacheManager(cache)
+
+      manager.clear({ name: 'mediaProgress' }, 'afterUpdate')
+
+      expect(cache.get(key)).to.be.undefined
+    })
+  })
 })