advplyrandGitHub d063d851e1 Merge pull request #5388 from mikiher/fix/bulk-download-permissions ...

Enforce per-item access checks on bulk library download

2026-07-21 18:34:13 -04:00

..

ApiKeyController.js

Update jwt secret handling

2025-07-08 16:39:50 -05:00

AuthorController.js

Add ignoreDuplicates for bookAuthor when renaming to respect unique index

2026-05-21 21:06:17 -07:00

BackupController.js

Update API JS docs

2024-08-11 17:01:25 -05:00

CacheController.js

Update API JS docs

2024-08-11 17:01:25 -05:00

CollectionController.js

Update collection endpoints to check user library access

2026-04-22 16:29:47 -05:00

CustomMetadataProviderController.js

Update API JS docs

2024-08-11 17:01:25 -05:00

EmailController.js

Fix local playback sync

2025-01-04 15:35:05 -06:00

FileSystemController.js

Update filesystem/pathexists endpoint to use existing isSameOrSubPath func

2026-04-18 16:24:48 -05:00

LibraryController.js

fix(permissions): enforce per-item access on bulk library download

2026-07-16 18:11:19 +03:00

LibraryItemController.js

Update podcast create/update endpoints to validate autoDownloadSchedule cron expression, validate cron expression before starting in CronManager

2026-04-24 16:55:42 -05:00

MeController.js

Fix IDOR bugs

2026-02-15 22:01:36 -05:00

MiscController.js

Update podcast create/update endpoints to validate autoDownloadSchedule cron expression, validate cron expression before starting in CronManager

2026-04-24 16:55:42 -05:00

NotificationController.js

Update NotificationManager to singleton

2024-09-27 17:33:23 -05:00

PlaylistController.js

Update playlist endpoints to check user still has library access

2026-04-22 16:42:58 -05:00

PodcastController.js

Enhance PodcastController to handle enclosure updates, allowing for null values and object structure validation for enclosure properties.

2026-06-18 12:39:50 +03:00

RSSFeedController.js

Remove old Feed/FeedEpisode/FeedMeta objects

2024-12-15 17:54:36 -06:00

SearchController.js

Fix Upload Lookup

2025-11-29 11:02:42 +01:00

SeriesController.js

Remove old Feed/FeedEpisode/FeedMeta objects

2024-12-15 17:54:36 -06:00

SessionController.js

Fix admin user unable to close sessions of other users #4746

2025-10-13 09:50:01 -05:00

ShareController.js

ShareController check ?t param is less than duration, revert frontend mounted usage of param

2026-04-25 17:13:22 -05:00

StatsController.js

Add admin middleware for StatsController

2025-03-29 17:37:13 -05:00

ToolsController.js

Replace advanced options with presets/advanced card

2025-05-02 17:24:46 -05:00

UserController.js

Simplify user delete checks

2026-07-20 17:33:15 -05:00