| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2026-07-17 | Harden remaining path-construction sinks against traversal | Shadowghost | |
| 2026-07-04 | Use InvariantCulture when parsing machine-generated dates | Nils Lehnen | |
| DateTime.TryParse without an IFormatProvider falls back to the current thread culture, so the same string can parse differently (or fail) depending on the server's locale. None of these call sites deal with user-entered text - they parse dates that come from filenames, an HTTP header, ffprobe metadata and values the app itself wrote to the auth database - so InvariantCulture is the correct provider everywhere here. Fixes the S6580 / CA1305 warnings on these call sites. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> | |||
| 2026-04-19 | Fix review comment | Shadowghost | |
| 2026-01-18 | Add ImageInfo index | Shadowghost | |
| 2025-07-27 | readd Format for splashscreen and user image | JPVenson | |
| 2025-07-27 | Remove even obsoleter code | JPVenson | |
| 2025-07-27 | Remove obsolete code | JPVenson | |
| 2025-07-27 | Removed all server side processing options from public endpoints for image gen | JPVenson | |
| 2025-04-02 | allow admin users to get Splashscreen even when disabled (#13825) | KGT1 | |
| refactor | |||
| 2025-03-25 | Fixed namespaces | JPVenson | |
| 2024-08-28 | Merge pull request #11665 from Bond-009/getuserbyid | Cody Robibero | |
| 2024-08-25 | Backport pull request #12490 from jellyfin/release-10.9.z | nielsvanvelzen | |
| Set Content-Disposition header to attachment for image endpoints Original-merge: 9645955629595a6ba2668432aeeadc4989c413b2 Merged-by: crobibero <cody@robibe.ro> Backported-by: Joshua M. Boniface <joshua@boniface.me> | |||
| 2024-08-05 | Change arguments AssertCanUpdateUser to take a user | Bond_009 | |
| 2024-04-14 | Validate item access (#11171) | Cody Robibero | |
| 2024-03-03 | Move userId in API from route to optional query parameter (#11074) | Cody Robibero | |
| * Move userId in API from route to optional query parameter * Standardize UserViewsController * Move userId to query in ImageController * Move userId to query in ItemsController * Move userId to query in PlaystateController * Move userId to query in SuggestionsController * Move userId from route to query in UserLibraryController * Clean up routes * Move userId to query in UserController * fix bad merge --------- Co-authored-by: Niels van Velzen <git@ndat.nl> | |||
| 2024-02-28 | Add support for converting from svg to other image types | Cody Robibero | |
| 2023-11-14 | Revert "Use System.Net.IPNetwork" | Bond_009 | |
| This reverts commit 117d05d288da1d412159a29c0cb8d5c8259e48ae. | |||
| 2023-11-14 | Fix warnings | Bond_009 | |
| 2023-11-12 | Move API policies to MediaBrowser.Common | Patrick Barron | |
| 2023-10-05 | Use CryptoStream to convert stream from base64 | Bond_009 | |
| Should be way more efficient | |||
| 2023-02-16 | Verify ContentType of uploaded images | Bond_009 | |
| 2023-02-12 | Merge branch 'master' into simplify_authz | cvium | |
| # Conflicts: # Jellyfin.Api/Auth/SyncPlayAccessPolicy/SyncPlayAccessHandler.cs | |||
| 2023-02-09 | refactor: simplify authz | cvium | |
| 2023-02-04 | Return NotFound when itemId isn't found | Bond_009 | |
| 2023-02-02 | Migrate to file-scoped namespaces | Shadowghost | |
| 2023-01-28 | Remove ability to add a played indicator to images (#9186) | Cody Robibero | |
| 2023-01-14 | Fix client supported image formats (#9071) | Teo Baranga | |
| 2023-01-04 | Fix all warnings in Jellyfin.Api (#9003) | Bond-009 | |
| 2022-12-07 | Fix release build | Bond_009 | |
| 2022-12-05 | Replace != null with is not null | Bond_009 | |
| 2022-12-05 | Replace == null with is null | Bond_009 | |
| 2022-10-06 | fix: use HttpContext and ClaimsPrincipal instead of IAuthorizationContext | cvium | |
| 2022-06-14 | Fix splashscreen (#7895) | Cody Robibero | |
| 2022-03-06 | Fix build | Cody Robibero | |
| 2022-03-05 | Merge pull request #7137 from SenorSmartyPants/master | Bond-009 | |
| 2022-01-28 | Merge pull request #6436 from daullmer/splashscreen | Cody Robibero | |
| 2022-01-10 | Use png for storage | Cody Robibero | |
| 2022-01-10 | suggestions from review | Cody Robibero | |
| 2022-01-10 | Suggestions from review | Cody Robibero | |
| 2022-01-07 | Remove isHeadRequest from GetStaticFile method signatures | SenorSmartyPants | |
| 2022-01-07 | Remove special HTTP HEAD processing | SenorSmartyPants | |
| removing this allows HTTP 206 Partial Content responses and lets some clients(popcorn hour namely) play videos from JF. | |||
| 2022-01-04 | Clean up | Cody Robibero | |
| 2022-01-04 | Apply suggestions from code review | David Ullmer | |
| 2022-01-04 | Add missing response code documentation | David Ullmer | |
| 2022-01-04 | Remove darkening filter from Splashscreen | David Ullmer | |
| Using the foregroundLayer parameter has the same effect | |||
| 2022-01-04 | Add Splashscreen API endpoint to ImageController | David Ullmer | |
| 2022-01-04 | Remove incorrect mime type image/jpg | Bond_009 | |
| 2021-09-26 | Remove all instances of en-US culture | Cody Robibero | |
| 2021-09-24 | Target net6.0 | Bond_009 | |
| 2021-05-20 | Migrate authentication db to EF Core | Patrick Barron | |
