Deluan f102036dc6 fix(server): clear server-managed fields in savePlaylist to prevent injection via REST API ...

Signed-off-by: Deluan <deluan@navidrome.org>

2026-03-05 20:56:16 -05:00

..

agents

refactor: run Go modernize (#5002)

2026-02-08 09:57:30 -05:00

artwork

refactor(server): remove legacy embedded coverart logic

2026-03-05 19:53:59 -05:00

auth

refactor(auth): replace untyped JWT claims with typed Claims struct

2026-03-02 14:03:27 -05:00

external

refactor: run Go modernize (#5002)

2026-02-08 09:57:30 -05:00

ffmpeg

feat: add configurable transcoding cancellation (#4411)

2025-12-01 17:33:53 -05:00

lyrics

feat(plugins): add lyrics provider plugin capability (#5126)

2026-03-03 15:48:39 -05:00

metrics

feat(server): implement FTS5-based full-text search (#5079)

2026-02-21 17:52:42 -05:00

playback

refactor: run Go modernize (#5002)

2026-02-08 09:57:30 -05:00

playlists

fix(server): clear server-managed fields in savePlaylist to prevent injection via REST API

2026-03-05 20:56:16 -05:00

publicurl

refactor(auth): replace untyped JWT claims with typed Claims struct

2026-03-02 14:03:27 -05:00

scrobbler

refactor: run Go modernize (#5002)

2026-02-08 09:57:30 -05:00

storage

chore(deps): bump golangci-lint to v2.10.0 and suppress new gosec false positives

2026-02-17 09:28:42 -05:00

archiver_test.go

feat(server): add M3U file to downloaded playlist

2025-05-27 20:13:37 -04:00

archiver.go

feat(server): add M3U file to downloaded playlist

2025-05-27 20:13:37 -04:00

common_test.go

test: add tests for userName and AbsolutePath in core/common.go

2025-04-18 11:53:47 -04:00

common.go

feat(bfr): Big Refactor: new scanner, lots of new fields and tags, improvements and DB schema changes (#2709)

2025-02-19 20:35:17 -05:00

core_suite_test.go

Rename log.LevelCritical to log.LevelFatal

2022-12-21 14:53:36 -05:00

inspect.go

feat(bfr): Big Refactor: new scanner, lots of new fields and tags, improvements and DB schema changes (#2709)

2025-02-19 20:35:17 -05:00

library_test.go

feat: add go-taglib pure Go metadata extractor (#4902)

2026-01-18 14:42:53 -05:00

library.go

refactor: run Go modernize (#5002)

2026-02-08 09:57:30 -05:00

maintenance_test.go

feat(scanner): implement selective folder scanning and file system watcher improvements (#4674)

2025-11-14 22:15:43 -05:00

maintenance.go

refactor: run Go modernize (#5002)

2026-02-08 09:57:30 -05:00

media_streamer_Internal_test.go

fix: forcing transcoding when client does not specify transcoding options (#3455)

2024-11-05 20:39:05 -05:00

media_streamer_test.go

Add support for timeOffset in /stream endpoint

2023-12-02 13:10:36 -05:00

media_streamer.go

feat: add configurable transcoding cancellation (#4411)

2025-12-01 17:33:53 -05:00

players_test.go

Use userId in player, other fixes (#3182)

2024-08-03 13:37:21 -04:00

players.go

feat(server): group Subsonic config options together

2025-03-05 12:29:30 -08:00

share_test.go

refactor: extract TruncateRunes function for safe string truncation with suffix

2025-11-06 14:27:38 -05:00

share.go

refactor: run Go modernize (#5002)

2026-02-08 09:57:30 -05:00

user_test.go

feat(plugins): New Plugin System with multi-language PDK support (#4833)

2026-01-14 19:22:48 -05:00

user.go

refactor: run Go modernize (#5002)

2026-02-08 09:57:30 -05:00

wire_providers.go

feat(plugins): add lyrics provider plugin capability (#5126)

2026-03-03 15:48:39 -05:00