Commit graph

1598 commits

Author SHA1 Message Date
Omar Roth
3b2e142542
Fix JSON serialization 2020-03-29 18:04:44 -04:00
Omar Roth
92798abb5d Add manifest-src to CSP 2020-03-19 13:41:08 -05:00
Omar Roth
59a15ceef6
Remove VarInt class 2020-03-15 17:47:16 -04:00
Omar Roth
4011a113cc
Strip invalid characters from referer URLs 2020-03-15 17:47:16 -04:00
leonklingele
70cbe91776
Migrate to a good Content Security Policy (#1023)
So attacks such as XSS (see [0]) will no longer be of an issue.

[0]: https://github.com/omarroth/invidious/issues/1022
2020-03-15 16:46:08 -05:00
Omar Roth
f92027c44b
Escape 'sort_by' 2020-03-10 11:25:32 -04:00
Omar Roth
1443335315
Switch textcaptcha to HTTPS 2020-03-10 11:12:11 -04:00
Omar Roth
bb72672dd9
Replace static asset requests with QUIC 2020-03-06 13:53:35 -05:00
Omar Roth
d96dee3aa6
Add debug info to videoplayback 2020-03-06 13:50:00 -05:00
Omar Roth
bd0aaa343b
Prevent storyboards from hanging 2020-03-05 13:49:06 -05:00
Omar Roth
a117d87f33
Skip validation checks for videoplayback, ggpht 2020-03-04 13:06:17 -05:00
Omar Roth
9dc4f8a1aa
Escape item titles in search page 2020-03-04 13:03:14 -05:00
leonklingele
0d536d11e3
Verify token signature in constant time, Run cheap checks first in token validation process (#1032)
* Verify token signature in constant time

To prevent timing side channel attacks

* Run cheap checks first in token validation process

Expensive checks such as the nonce lookup on the database or the
signature check can be run after cheap/fast checks.
2020-03-02 10:04:36 -06:00
Omar Roth
e21f770485
Fix status check for channel page 2020-02-28 15:57:45 -05:00
Omar Roth
697c00dccf
Sanitize PLID 2020-02-28 14:10:01 -05:00
Omar Roth
1caf6a3298
Fix deadlock when updating notifications 2020-02-28 13:13:48 -05:00
Omar Roth
02fd02d482
Remove DB array concatenation 2020-02-28 12:14:29 -05:00
Pedro Lucas Porcellis
239fb0db94
Remove duplicated Github logo on footer (#986)
* Remove duplicated Github logo on footer
2020-02-20 18:50:54 -05:00
Omar Roth
43da06a354
Remove temp fix for crystal/crystal-lang#7383 2020-02-20 18:30:46 -05:00
Omar Roth
fea6b67067
Remove 'type' attribute from community embed 2020-02-20 18:30:46 -05:00
Leon Klingele
bc9dc3bf1e
Update code formatting for Crystal 0.33.0
Crystal 0.33.0 introduced some changes to to the code formatter.
Run "crystal tool format" so CI doesn't fail anymore.
2020-02-15 19:52:28 +01:00
Leon Klingele
e3c10d779d
Add support to read config from environment variable
Try to read app config from the "INVIDIOUS_CONFIG" environment variable.
If the variable is undefined, read config from config.yml file as before.

Required by https://github.com/omarroth/invidious/pull/1015 et al.
2020-02-04 15:53:46 +01:00
Omar Roth
9841f74adc
Add handling for comments with no content 2020-02-01 12:14:37 -05:00
Omar Roth
b56e493d92
Remove frameborder from community embeds 2020-02-01 11:23:12 -05:00
Omar Roth
a2c5211b20
Check /browse_ajax for channel blocks 2020-02-01 11:23:12 -05:00
Omar Roth
648cc0f006
Refactor signature extraction 2020-01-24 17:02:28 -05:00
Omar Roth
7baced75e5
Fix channel redirect 2020-01-14 08:21:17 -05:00
Omar Roth
7b88d0efe3
Minor refactor 2020-01-08 20:27:21 -05:00
Omar Roth
4aada65dae
Fix channel playlists for genre channels 2020-01-08 20:26:47 -05:00
Omar Roth
88a538e71b
Minor refactor for channel playlists 2019-12-05 15:47:35 -05:00
Omar Roth
513363504f
Add better error message for fetch_channel 2019-12-05 15:46:21 -05:00
Omar Roth
0e844edacb
Add support for pt-BR 2019-12-05 15:26:35 -05:00
Omar Roth
1499ce43bf
Add support for Romanian locale 2019-12-03 19:41:58 -05:00
Omar Roth
823603650f
Add support for /sorry/index CAPTCHA 2019-12-03 19:14:11 -05:00
Omar Roth
062867a38d
Strip domain from caption URLs 2019-12-01 17:52:39 -05:00
Omar Roth
04d56420d1 Run 'crystal tool format' 2019-11-28 08:20:44 -06:00
Omar Roth
a017574f74 Add support for force_resolve to QUIC client 2019-11-28 08:19:28 -06:00
Omar Roth
0e3a48ff76
Update QUICPool 2019-11-24 13:41:47 -05:00
Omar Roth
276bf09238
Skip preferences for assets 2019-11-20 12:04:53 -05:00
Omar Roth
d46b26e3bc
Use QUIC for connections to YouTube 2019-11-18 17:28:32 -05:00
Omar Roth
236c172c6f
Merge pull request #896 from sh4dowb/master
Fixed double quotes in meta description
2019-11-14 10:38:38 -05:00
Omar Roth
c07cd3a856
Fix typo in playlist url 2019-11-14 10:11:33 -05:00
sh4dowb
79da61782b
Fixed double quotes in meta description 2019-11-11 19:00:23 +03:00
Omar Roth
8af87f1a8b
Fix updating of cookies 2019-11-10 10:02:02 -05:00
Omar Roth
494c954cbb
Add etag to /api/v1/annotations 2019-11-09 22:05:17 -05:00
Omar Roth
71bc9eea28
Add support for Anti-Captcha 2019-11-09 14:22:39 -05:00
Omar Roth
e3b2bcfd06
Fix ID for search duration 2019-11-08 09:29:33 -05:00
Omar Roth
142d974641
Use force_resolve for search suggestions 2019-11-07 12:25:34 -05:00
Omar Roth
0e1d6aa85c
Update error messages for video extractor 2019-11-05 19:39:11 -05:00
Omar Roth
bcdb8cd770
Fix default fo dark_mode 2019-11-04 17:08:13 -05:00
Omar Roth
7b2ca55089
Fix escaping in email query 2019-11-04 12:26:05 -05:00
Omar Roth
f6ef0b684a
Fix word-break for links in channel RSS 2019-11-03 08:53:16 -05:00
Omar Roth
02e1cdf210
Add support for '/yts/img' endpoint 2019-11-01 12:02:38 -04:00
Omar Roth
b58950c574
Fix decoding for channel playlists extractor 2019-11-01 12:00:59 -04:00
Omar Roth
833a60f29c
Update pubsub to use client pool 2019-11-01 07:34:36 -04:00
Omar Roth
13e7cca1a4
Bump read timeout 2019-10-28 12:34:50 -04:00
Omar Roth
0f3c477ff3
Remove dependency on ImageMagick (replace with rsvg-convert) 2019-10-28 10:49:05 -04:00
Omar Roth
25c8cd9246
Fix escaping for search params 2019-10-28 06:17:39 -04:00
Omar Roth
c58841100a
Fix extractor for channel community cursor 2019-10-27 21:44:17 -04:00
Omar Roth
03e24cccd0
Add support for configurable administrator email 2019-10-27 14:18:07 -04:00
Omar Roth
35f011758d
Merge pull request #850 from XVnNzb2kFEhV9Tjm/master
Add Japanese translations
2019-10-27 14:09:31 -04:00
Omar Roth
2ebfaf76f2
Refactor continuation token handling 2019-10-27 13:50:42 -04:00
Omar Roth
0cf187dee7
Add support for image captcha in Google login 2019-10-27 00:19:05 -04:00
Omar Roth
bdeb325bad
Fix monkeypatch for HTTP::Client 2019-10-26 11:51:23 -04:00
Omar Roth
a1225b6d0d
Sanitize input to decode_length_seconds 2019-10-26 10:17:25 -04:00
XVnNzb2kFEhV9Tjm
f0368b02c4 Add Japanese translations 2019-10-26 18:34:25 +09:00
Omar Roth
202de1436d
Fix broken connections in pool 2019-10-25 23:06:08 -04:00
Omar Roth
7f8746fcd4
Remove invalid connections from pool 2019-10-25 22:40:53 -04:00
Omar Roth
e05a25d701
Vary user-agent 2019-10-25 18:02:33 -04:00
Omar Roth
6930570fa2
Add HTTPClient pool 2019-10-25 12:58:16 -04:00
Omar Roth
aba2c5b938
Remove code for /api/v1/insights 2019-10-25 12:25:57 -04:00
Omar Roth
159b4f9734
Format source 2019-10-21 21:40:03 -04:00
Omar Roth
46a737c7a1
Skip deleted videos in playlist 2019-10-21 19:00:56 -04:00
Omar Roth
c3e57f1fdd
Fix typo in footer 2019-10-20 23:02:16 -04:00
Omar Roth
a9af484412
Merge pull request #839 from TheFrenchGhosty/crypto
Add protocol to the cryptocurrencies
2019-10-20 22:39:24 -04:00
Omar Roth
007646774e
Fix typo in English locale 2019-10-20 21:01:27 -04:00
Omar Roth
2d78e35e16
Fix typo in syncing user preferences 2019-10-20 20:58:50 -04:00
Omar Roth
7524b5e349
Move feed_menu and default_home into user preferences 2019-10-20 20:43:33 -04:00
Omar Roth
2a04a48b89
Fix redirect for livestreams 2019-10-20 12:48:55 -04:00
TheFrenchGhosty
3cbdaab81e Add protocol to the cryptocurrencies 2019-10-19 20:23:27 +02:00
Omar Roth
2a4b252a9d
Only force resolve for www.youtube.com 2019-10-18 12:41:03 -04:00
Omar Roth
bf48809b61
Allow unlisted playlists to be viewed from /api/v1/playlists/ 2019-10-16 08:21:26 -04:00
Omar Roth
3f3e52d7ae
Fix indexId for created playlist video 2019-10-15 22:09:01 -04:00
Omar Roth
be055d9dcb
Add support for custom playlists 2019-10-15 21:17:14 -04:00
Omar Roth
1e34a61911
Fix white-space for RSS feeds 2019-10-14 21:07:07 -04:00
Omar Roth
97bd1da2a2
Remove SSL redirect 2019-10-14 21:07:07 -04:00
Omar Roth
55f0a82249
Remove Patreon links 2019-10-12 10:07:18 -04:00
Omar Roth
7aada3f328
Avoid override for X-Client headers 2019-10-10 23:45:46 -04:00
Omar Roth
dad885c051
Add YouTube-Client headers to HTTP requests 2019-10-10 22:03:39 -04:00
Omar Roth
f5c7bbfda8
Add support for zh-TW translation 2019-10-09 10:23:26 -04:00
Omar Roth
2d59fdd178
Fix default value for empty description 2019-10-04 17:04:43 -04:00
Omar Roth
c0796ac3d6
Add description to RSS body 2019-10-04 12:50:22 -04:00
Omar Roth
68be24ffc6
Refactor process_video_params 2019-10-04 12:23:28 -04:00
Omar Roth
9dcc87c705
Refactor storyboard generation 2019-10-04 10:26:02 -04:00
Omar Roth
da07f99d3d
Bump supported Crystal version 2019-09-30 15:36:54 -04:00
Omar Roth
eef66de68c
Merge pull request #743 from girst/rssparams
Forward query string parameters from Atom feeds
2019-09-30 15:36:35 -04:00
girst
4aa1180fce Forward parameters given in &params= from Atom feeds
Any parameters given in &params=... are appended to /watch URLs.  This
allows e.g. passing &raw=1&listen=1 to a playlist of music and use an
rss reader like newsboat as a media player, like so:

    https://invidio.us/feed/playlist/XXX?params=%26raw%3D1%listen%3D1

All three feeds--channels, playlists, subscriptions--are supported.
2019-09-30 17:48:13 +02:00
Omar Roth
e390405d0c
Update privacy policy 2019-09-24 20:47:49 -04:00
Omar Roth
f69f0b97f5
Add fix for index out of bounds during high load 2019-09-24 13:38:50 -04:00
Omar Roth
4361ea9686
Update DB calls for 0.31.0 2019-09-24 13:38:50 -04:00