Dispatcharr/apps
2026-05-04 21:34:56 -05:00
..
accounts bump MAX_CUSTOM_PROPS_SIZE to 100KB 2026-05-01 19:15:45 -04:00
api initial connect feature 2026-02-08 09:29:22 -05:00
backups security: Fixed path traversal vulnerability in file uploads. The M3U account upload (apps/m3u/api_views.py), logo upload (apps/channels/api_views.py), and backup upload (apps/backups/api_views.py) all used the uploaded filename directly without sanitization. os.path.join() discards all preceding components when it encounters an absolute path segment, and pathlib's / operator behaves identically; a relative ../ sequence also escapes via OS path resolution at open() time. All three upload paths now strip directory components via Path(name).name and validate the resolved path remains within the intended upload directory. Exploiting any of these required admin credentials. 2026-04-09 21:32:36 -05:00
channels feat: Make EPG channel optional in series rules and enhance search criteria 2026-05-04 21:34:56 -05:00
connect Enhancement: VOD start/stop notifications and system events. 2026-04-23 18:03:02 -05:00
dashboard modified database fields for consistency, removed custom_url from streams (no longer needed) 2025-03-16 09:07:10 -04:00
epg feat: Enhance series rule evaluation and management 2026-05-04 20:45:40 -05:00
hdhr rename Channel.user_hidden to Channel.hidden_from_output 2026-05-01 19:44:16 -05:00
m3u perf: eliminate three remaining N+1 queries in list endpoints 2026-05-02 16:48:37 -05:00
output Merge branch 'dev' of https://github.com/Dispatcharr/Dispatcharr into pr/CodeBormen/1215 2026-05-04 18:27:20 -05:00
plugins Enhancement: Improve plugin discovery process by adding a completion flag and refining in-memory registry handling 2026-04-30 10:33:41 -05:00
proxy Merge pull request #1214 from sv-dispatcharr/feat/restrict-xc-user-access 2026-05-03 15:41:37 -05:00
vod fix: clear previous failure entries after successful logo fetch in LogoViewSet and VODLogoViewSet 2026-04-14 13:34:17 -05:00