Ryan
|
13aa011632
|
#nosec to silence false positive
|
2025-05-14 07:05:35 -04:00 |
|
Ryan
|
1add160f5d
|
setAttribute + encodeURI to avoid “DOM text reinterpreted as HTML” alerts
|
2025-05-14 07:00:04 -04:00 |
|
Ryan
|
87368143b5
|
Fixed new issues with Undefined username in header on profile pic change & TOTP Enabled not checked
|
2025-05-14 06:51:16 -04:00 |
|
Ryan
|
939aa032f0
|
ui: polish header and user panel with dropdown + profile pic support & file list adjustments
|
2025-05-14 05:20:22 -04:00 |
|
Ryan
|
fbd21a035b
|
Ensure /var/www/config exists and is owned by www-data so that start.sh sed -i updates work reliably
|
2025-05-08 17:20:36 -04:00 |
|
Ryan
|
2f391d11db
|
fix(admin-api): omit clientSecret from getConfig response for security & add OIDC scope.
v1.3.3
|
2025-05-08 11:39:44 -04:00 |
|
Ryan
|
8c70783d5a
|
fix(upload): relax filename validation regex to allow broader Unicode and special chars (closes #29)
v1.3.2
|
2025-05-08 04:58:57 -04:00 |
|
Ryan
|
b4d6f01432
|
feat(admin): add proxy-only auth bypass and configurable auth header (closes #28)
|
2025-05-08 04:43:33 -04:00 |
|
Ryan
|
d48b15a5f4
|
screenshots updated
|
2025-05-05 08:49:27 -04:00 |
|
Ryan
|
d1726f0160
|
Refactor auth flow: add loading overlay, separate login, extract initializeApp
v1.3.1
|
2025-05-05 07:28:28 -04:00 |
|
Ryan
|
bd1841b788
|
Unify modals: shared close button, truncate long filenames, fix sizing & overflow
|
2025-05-04 15:44:43 -04:00 |
|
Ryan
|
bde35d1d31
|
Extend clean up expired shared entries
|
2025-05-04 02:28:33 -04:00 |
|
Ryan
|
8d6a1be777
|
Fix FolderController readOnly create folder permission
v1.3.0
|
2025-05-04 01:22:43 -04:00 |
|
Ryan
|
56f34ba362
|
Admin Panel Refactor & Enhancements
|
2025-05-04 00:23:46 -04:00 |
|
Ryan
|
4d329e046f
|
Remove old controllers
|
2025-05-04 00:02:38 -04:00 |
|
Ryan
|
f3977153fb
|
Refactor AdminPanel: extract module, add collapsible sections & shared-links management, enforce PascalCase controllers
|
2025-05-03 23:41:02 -04:00 |
|
Ryan
|
274bedd186
|
Improve PDF preview and input focus behaviors
v1.2.8
|
2025-04-30 00:53:44 -04:00 |
|
Ryan
|
2e4dbe7f7f
|
support custom expiration durations for file and folder shares (closes #26)
|
2025-04-28 20:02:11 -04:00 |
|
Ryan
|
0334e443eb
|
fix(shared-folder): sanitize gallery rendering to avoid innerHTML and resolve CodeQL warning (fixes #27)
|
2025-04-27 18:28:39 -04:00 |
|
Ryan
|
76f5ed5c96
|
shared-folder: externalize gallery view JS & enforce CSP compliance
v1.2.7
|
2025-04-27 18:18:00 -04:00 |
|
Ryan
|
18f588dc24
|
Update Manual Installation
|
2025-04-27 17:23:43 -04:00 |
|
Ryan
|
491c686762
|
fix: advancedSearchToggle in renderFileTable & renderGalleryView
|
2025-04-27 17:08:49 -04:00 |
|
Ryan
|
25303df677
|
fixed: Pagination controls & Items-per-page dropdown
|
2025-04-27 16:50:22 -04:00 |
|
Ryan
|
ae0d63b86f
|
fix: checkbox in toolbar does not select all files (Fixes #25)
|
2025-04-27 15:34:41 -04:00 |
|
Ryan
|
41ade2e205
|
refactor/fix: api redoc
|
2025-04-26 17:31:51 -04:00 |
|
Ryan
|
0a9d332d60
|
refactor(auth): relocate logout handler to main.js
v1.2.6
|
2025-04-26 04:33:01 -04:00 |
|
Ryan
|
1983f7705f
|
enhance CSP for iframe and refactor gallery view event handlers
|
2025-04-26 04:08:56 -04:00 |
|
Ryan
|
6b2bf0ba70
|
Refactor event binding in domUtils & fileListView
|
2025-04-26 03:33:23 -04:00 |
|
Ryan
|
6d9715169c
|
Harden security: enable CSP, add SRI, and externalize inline scripts
|
2025-04-26 02:28:02 -04:00 |
|
Ryan
|
0645a3712a
|
Use Material icons for dark/light toggle and simplify download flows
|
2025-04-25 20:40:00 -04:00 |
|
Ryan
|
ebc32ea965
|
consolidate & protect API docs with php wrapper
|
2025-04-24 19:34:09 -04:00 |
|
Ryan
|
078db33458
|
Embed API documentation as a full-screen modal
v1.2.5
|
2025-04-24 17:35:41 -04:00 |
|
Ryan
|
04f5cbe31f
|
chore: update install docs, secure API docs, refine Docker vhost, remove unused folders
|
2025-04-24 17:02:50 -04:00 |
|
Ryan
|
b5a7d8d559
|
continue breadcrumb update
|
2025-04-23 23:17:23 -04:00 |
|
Ryan
|
58f8485b02
|
fix(breadcrumb): prevent XSS in title breadcrumbs – closes #24
|
2025-04-23 22:45:25 -04:00 |
|
Ryan
|
3e1da9c335
|
Add missing permissions in UserModel.php for TOTP login.
|
2025-04-23 21:15:55 -04:00 |
|
Ryan
|
6bf6206e1c
|
Add missing permissions for TOTP login
|
2025-04-23 21:14:59 -04:00 |
|
Ryan
|
f9c60951c9
|
Removed Old CSRF logic
|
2025-04-23 19:53:47 -04:00 |
|
Ryan
|
06b3f28df0
|
New fetchWithCsrf with fallback for session change. start.sh session directory added.
v1.2.4
|
2025-04-23 09:53:21 -04:00 |
|
Ryan
|
89f124250c
|
Fixed totp isAdmin when session is missing but remember_me_token cookie present
|
2025-04-23 02:30:43 -04:00 |
|
Ryan
|
66f13fd6a7
|
dockerignore cleanup
|
2025-04-23 01:50:24 -04:00 |
|
Ryan
|
a81d9cb940
|
Enhance remember me
|
2025-04-23 01:47:27 -04:00 |
|
Ryan
|
13b8871200
|
docker: remove symlink add alias for uploads folder
|
2025-04-22 22:28:06 -04:00 |
|
Ryan
|
2792c05c1c
|
docker: consolidate config & security improvements
|
2025-04-22 21:34:21 -04:00 |
|
Ryan
|
6ccfc88acb
|
Composer & WebDAV readme changes
|
2025-04-22 19:27:53 -04:00 |
|
Ryan
|
7f1d59b33a
|
add acknowledgements to README and LICENSE
|
2025-04-22 19:06:33 -04:00 |
|
Ryan
|
e4e8b108d2
|
Add permissions to workflow
|
2025-04-22 18:11:42 -04:00 |
|
Ryan
|
242661a9c9
|
New Admin Panel settings (enableWebDAV & shareMaxUploadSize)
v1.2.3
|
2025-04-22 17:11:19 -04:00 |
|
Ryan
|
ca3e2f316c
|
PUID/PGID changes
|
2025-04-22 08:19:10 -04:00 |
|
Ryan
|
6ff4aa5f34
|
support PUID/PGID env vars & update Unraid template
|
2025-04-22 08:06:29 -04:00 |
|