jellyfin/Jellyfin.Api/Controllers/HlsSegmentController.cs, branch v10.8.0-alpha2Unnamed repository; edit this file 'description' to name the repository.
https://git.lodewillems.com/jellyfin/atom?h=v10.8.0-alpha22021-11-08T19:40:52ZFix and disable new dotnet6 warnings2021-11-08T19:40:52ZCody Robiberocody@robibe.ro2021-11-08T19:39:02Zurn:sha1:64652b639299ecd9a692f89a7bbda3f827129fa3Fix warning: The nullable warning suppression expression is redundant (#2149)2021-10-03T03:43:41ZKonHkonh@yandex.ru2021-10-03T03:43:05Zurn:sha1:7c282ec3694d8e6a127588c41cd0c68f8ee4e93bApply review suggestions2021-03-20T00:28:14ZErwin de HaanEraYaN@users.noreply.github.com2021-03-20T00:28:14Zurn:sha1:1f3aa3fe6f72f9b745dac7de5b6f8b877590017cFix directory traversal in the HlsSegmentController in a fairly rudimentary but working way.2021-03-20T00:14:59ZErwin de HaanEraYaN@users.noreply.github.com2021-03-19T23:38:58Zurn:sha1:f61d18612b2e6c6e9a5dd4510331ac8d89a337d5
GHSL-2021-050: Issue 1,2,3 Arbitrary file read and directory traversal.
The segment id's can probably just be verified to be an actual ID or to not contain any forward or backward slashes
Specify defaults or set query parameter to nullable2021-03-05T01:25:52Zcrobiberocody@robibe.ro2021-03-05T01:25:52Zurn:sha1:858c91ab485f79648aa625e89378c6de9e19df4bCreate BaseItemKind enum2021-02-11T00:09:23Zcrobiberocody@robibe.ro2021-02-11T00:09:23Zurn:sha1:223b42aed3395f7d01ea513bf352cdf4fd3e7002Remove UTF8 bom from some files2020-11-21T13:26:03ZBond_009bond.009@outlook.com2020-11-21T13:26:03Zurn:sha1:f5973d57e8c070692450f0e04e01615c78c954d9Add response code documentation2020-11-19T23:16:23Zcrobiberocody@robibe.ro2020-11-19T23:16:23Zurn:sha1:d58e435409afc013ff6d31c2d99c9b32078bbe96Fix live tv hls playback2020-11-19T23:15:20Zcrobiberocody@robibe.ro2020-11-19T23:15:20Zurn:sha1:fe8531f74e1152086673026840e244d66054acd4Updated based on review feedback2020-11-14T01:04:06Zcrobiberocody@robibe.ro2020-11-14T01:04:06Zurn:sha1:73d2cb1c2a3a7cd1a30840a2b52921a3b81c6809