Commit graph

4088 commits

Author SHA1 Message Date
Hosted Weblate 47e273c402
Update Arabic translation
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Rex_sa <rex.sa@pm.me>
2022-01-04 17:53:45 +01:00
Hosted Weblate ba25e8e720
Update Chinese (Traditional) translation
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Jeff Huang <s8321414@gmail.com>
2022-01-04 17:53:45 +01:00
Hosted Weblate 058ae5cc29
Update Turkish translation
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Oğuz Ersen <oguzersen@protonmail.com>
2022-01-04 17:53:45 +01:00
Hosted Weblate f8be5d2559
Update Hungarian translation
Update Hungarian translation

Update Hungarian translation

Update Hungarian translation

Co-authored-by: Benedek Nagy <benedek@bndk.club>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: f3rr31 <5920873@disroot.org>
2022-01-04 17:53:44 +01:00
Hosted Weblate 792d25594c
Update Spanish translation
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Jorge Maldonado Ventura <jorgesumle@freakspot.net>
2022-01-04 17:53:44 +01:00
mcnesium 9f9020e422
Double quote variable to prevent sh error (#2754) 2022-01-04 17:53:40 +01:00
Samantaz Fox 302fecbdcb
Clean useless database arguments (5/5) 2022-01-04 17:15:43 +01:00
Samantaz Fox d74873fed1
Clean useless database arguments (4/5) 2022-01-04 17:15:43 +01:00
Samantaz Fox 40ed4a0506
Clean useless database arguments (3/5) 2022-01-04 17:15:43 +01:00
Samantaz Fox c25d664edc
Clean useless database arguments (2/5) 2022-01-04 17:15:43 +01:00
Samantaz Fox 9bad7e2940
Clean useless database arguments (1/5) 2022-01-04 17:15:43 +01:00
Samantaz Fox 6704ce3214
Move DB utility functions to the proper module 2022-01-04 17:15:43 +01:00
Samantaz Fox 914cfbd953
Move DB queries related to 'annotations' in a separate module 2022-01-04 17:15:43 +01:00
Samantaz Fox 85cf27119c
Move DB queries related to playlists in a separate module (3/3) 2022-01-04 17:15:43 +01:00
Samantaz Fox 7691f53520
Move DB queries related to 'users' in a separate module (2/2) 2022-01-04 17:15:43 +01:00
テクニカル諏訪子 f6740815a5 Merge branch 'master' of github.com:iv-org/invidious 2022-01-05 01:14:42 +09:00
Samantaz Fox 094f835642
Move DB queries related to 'users' in a separate module (1/2) 2022-01-04 17:13:52 +01:00
Samantaz Fox 92eea3b18b
Move DB queries related to session tokens in a separate module 2022-01-04 17:13:52 +01:00
Samantaz Fox c021b93b5c
Move DB queries related to channels in a separate module 2022-01-04 17:13:52 +01:00
Samantaz Fox d94d4c2045
Move DB queries related to statistics in a separate module 2022-01-04 17:13:52 +01:00
Samantaz Fox 46d08237c6
Move DB queries related to playlists in a separate module (2/3) 2022-01-04 17:13:52 +01:00
Samantaz Fox 3deafe9f8d
Move DB queries related to playlists in a separate module (1/3) 2022-01-04 17:13:51 +01:00
Samantaz Fox 998edba6f0
Move DB queries related to 'videos' in a separate module 2022-01-04 17:13:51 +01:00
Samantaz Fox 4f219362fe
Also fix DISABLE_QUIC declaration 2022-01-04 01:47:41 +01:00
Samantaz Fox c427444946
Flag to disable QUIC should be 'disable_quic' 2022-01-04 01:46:07 +01:00
テクニカル諏訪子 d257631c8a シャーツ 2022-01-03 21:46:51 +09:00
11Tuvork28 d59323a601
Add check to avoid saving player pos to the
length of the given video by saving a minimum of 15 at the end
2021-12-31 03:24:08 +01:00
テクニカル諏訪子 6fcbde4340 Merge branch 'master' of git.076.ne.jp:TechnicalSuwako/invidious-mod 2021-12-31 03:26:05 +09:00
テクニカル諏訪子 14b94d7a70 Merge branch 'master' of github.com:iv-org/invidious 2021-12-31 03:22:05 +09:00
Samantaz Fox a779cdd463
Merge pull request #2727 from SamantazFox/add-shorts-support
Add support for shorts
2021-12-28 22:13:36 +01:00
テクニカル諏訪子 178a7f4dae Merge branch 'master' of git.076.ne.jp:TechnicalSuwako/invidious-mod 2021-12-28 10:54:32 +09:00
テクニカル諏訪子 d9bd181fd6 Merge branch 'master' of github.com:iv-org/invidious 2021-12-28 10:54:19 +09:00
テクニカル諏訪子 c9870736a8 Merge branch 'master' of github.com:iv-org/invidious 2021-12-28 09:41:58 +09:00
Théo Gaillard 73a142fd9b
fix: null ptr while loading/switching theme 2021-12-26 13:53:32 +01:00
Théo Gaillard 0453d08eed
fix: null ptr while retaining time 2021-12-26 13:45:27 +01:00
TheFrenchGhosty a18068aedf
Merge pull request #2734 from iv-org/TheFrenchGhosty-patch-1
Add the Invidious's Mastodon account to the README
2021-12-22 00:03:53 +00:00
TheFrenchGhosty 12fba3bb7a
Add the Invidious's Mastodon account to the README 2021-12-22 01:03:09 +01:00
Samantaz Fox fc2b9031d4
i18n: Add Serbian back 2021-12-22 00:52:08 +01:00
Samantaz Fox 28a6589a1e
Merge pull request #2538 from bbielsa/player-remember-position
Retain video time position in video player
2021-12-21 22:05:43 +01:00
Samantaz Fox cf9c790499
Merge pull request #2730 from weblate/weblate-invidious-translations
Translations update from Hosted Weblate
2021-12-21 22:02:20 +01:00
Hosted Weblate 3d6dceae10
Update Indonesian translation
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: I. Musthafa <i.musthafa66@gmail.com>
2021-12-21 20:02:23 +01:00
Hosted Weblate 130a14d0d9
Update Chinese (Traditional) translation
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Jeff Huang <s8321414@gmail.com>
2021-12-21 20:02:23 +01:00
Hosted Weblate f07b4f8fc4
Update Turkish translation
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Oğuz Ersen <oguzersen@protonmail.com>
2021-12-21 20:02:23 +01:00
Hosted Weblate 75f655aafc
Update French translation
Update French translation

Co-authored-by: Bundy01 <bundy@posteo.eu>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Samantaz Fox <translator-weblate@samantaz.fr>
2021-12-21 20:02:23 +01:00
Hosted Weblate a3fd9ccea7
Update Arabic translation
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Rex_sa <rex.sa@pm.me>
2021-12-21 20:02:22 +01:00
Hosted Weblate 4136ac633a
Update Japanese translation
Co-authored-by: GnuPGを使うべきだ <dieeeazpnnqbpddh@cock.email>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
2021-12-21 20:02:22 +01:00
Hosted Weblate 2724456882
Update Norwegian Bokmål translation
Co-authored-by: Allan Nordhøy <epost@anotheragency.no>
Co-authored-by: Hosted Weblate <hosted@weblate.org>
2021-12-21 20:02:22 +01:00
Hosted Weblate b396a2cbfd
Update Spanish translation
Co-authored-by: Hosted Weblate <hosted@weblate.org>
Co-authored-by: Jorge Maldonado Ventura <jorgesumle@freakspot.net>
2021-12-21 20:02:22 +01:00
テクニカル諏訪子 201e570669 Merge branch 'master' of github.com:iv-org/invidious 2021-12-22 00:31:36 +09:00
Samantaz Fox ddb06b0cac
Fix XSS vulnerability in channel playlists
The channel/<ucid>/playlists page was vulnerable to Cross Site Scripting
(XSS), because the different URL parameters were inserted as-is in the URL
meant for instance switching.

This vulnerability could allow an attacker to inject malicious Javascript
in the page by tricking the user to click on a crafted link.

Bug introduced in commit 66e7285108
("Only use /redirect when automatically redirecting").

Thanks to Jack (@testa:cthd.icu on Matrix, @cysea on github) for responsibly
reporting this issue!
2021-12-19 20:51:44 +01:00