0xsysr3ll 6380c951b4 fix(auth): critical auth vulnerability in Plex profile selection ...

This fixes a critical security vulnerability where non-imported profiles could
authenticate as arbitrary users if their profile IDs shared any substring.

2025-07-21 23:56:00 +02:00

..

api

fix(api): remove unused PlexProfile interface from plextv.ts

2025-07-21 23:56:00 +02:00

constants

feat(auth): support Plex home profile login

2025-07-21 23:56:00 +02:00

entity

feat(auth): support Plex home profile login

2025-07-21 23:56:00 +02:00

interfaces/api

feat: allow changing YouTube host for trailers (#643)

2025-05-07 16:32:15 +02:00

job

feat(blacklist): Automatically add media with blacklisted tags to the blacklist (#1306)

2025-04-11 22:48:44 +08:00

lib

fix(proxy): modify the registration of the axios interceptors (#1791)

2025-07-20 11:33:16 +02:00

middleware

perf(imageproxy): do not set cookies to image proxy so CDNs can cache images (#3332)

2023-02-12 20:05:29 +09:00

migration

fix(migration): remove unnecessary fields from Plex profiles migration

2025-07-21 23:56:00 +02:00

models

feat: Option on item's page to add/remove from watchlist (#781)

2024-08-07 13:46:57 +02:00

repositories

feat(add watchlist): adding midding functionality from overserr

2023-04-27 22:27:23 +07:00

routes

fix(auth): critical auth vulnerability in Plex profile selection

2025-07-21 23:56:00 +02:00

scripts

feat: view other users' watchlists (#2959)

2022-08-22 05:50:27 +00:00

subscriber

chore: merge upstream (#1653)

2025-05-10 01:14:36 +08:00

templates/email

feat(notif): issue notifications (#2242)

2021-12-04 21:24:26 +09:00

types

revert: reverts csrf-csrf back to csurf (#1442)

2025-03-11 09:33:40 +08:00

utils

fix(proxy): modify the registration of the axios interceptors (#1791)

2025-07-20 11:33:16 +02:00

datasource.ts

refactor(postgres): add postgres socket (#1248)

2025-01-12 22:40:46 +08:00

index.ts

fix: remove LunaSea (#1759)

2025-07-09 16:03:06 +02:00

logger.ts

refactor: rename some remaining Overseerr occurrences (#1397)

2025-02-26 13:08:00 +08:00

tsconfig.json

refactor: update Next.js, React.js and Node.js (#815)

2024-06-23 23:43:54 +02:00