Erwin de Haan f61d18612b Fix directory traversal in the HlsSegmentController in a fairly rudimentary but working way. ...

GHSL-2021-050: Issue 1,2,3 Arbitrary file read and directory traversal.
The segment id's can probably just be verified to be an actual ID or to not contain any forward or backward slashes

2021-03-20 01:14:59 +01:00

..

Attributes

Add image file accept to openapi

2021-02-10 16:12:52 -07:00

Auth

Minor code style related change

2020-12-07 16:15:56 +01:00

Constants

Update authorization policies for SyncPlay

2020-12-07 10:33:15 +01:00

Controllers

Fix directory traversal in the HlsSegmentController in a fairly rudimentary but working way.

2021-03-20 01:14:59 +01:00

Extensions

Minor improvements

2021-02-21 02:49:52 +01:00

Helpers

Merge pull request #5403 from BaronGreenback/DLNAProfileFix

2021-03-10 11:50:08 +01:00

ModelBinders

Change log level for converters

2021-01-01 09:34:39 -07:00

Models

Fix third part integration

2021-03-11 22:45:58 -07:00

WebSocketListeners

Remove circular dependency between websocket listeners and manager

2020-11-28 11:21:53 +01:00

BaseJellyfinApiController.cs

Move json profiles to constant strings.

2020-09-03 12:15:24 -06:00

Jellyfin.Api.csproj

FxCop -> Net Analyzers (part 1)

2021-03-09 03:04:47 +01:00