Gauthier 620135aeac fix: resolve a vulnerability with admin token (#1345) ...

By default, the jellyfinAuthToken of every user was always retrieved from the database, and
sometimes sent back to the client. Any logged-in user could retrieve this token via a request
containing admin user information, and use it to gain full access to Jellyfin. This PR removes the
auth token and the device ID from the fields selected by default by TypeORM.

2025-02-10 00:17:11 +01:00

..

Blacklist.ts

…

DiscoverSlider.ts

…

Issue.ts

…

IssueComment.ts

…

Media.ts

…

MediaRequest.ts

fix: optimize media status update to avoid lifecycle hook triggers (#1218)

2025-01-03 12:14:39 +01:00

OverrideRule.ts

feat: override rules (#945)

2024-12-29 05:20:35 +08:00

Season.ts

fix: remove non-null requirement for some fields (#1175)

2024-12-22 05:56:08 +01:00

SeasonRequest.ts

…

Session.ts

…

User.ts

fix: resolve a vulnerability with admin token (#1345)

2025-02-10 00:17:11 +01:00

UserPushSubscription.ts

…

UserSettings.ts

feat(notifications): added telegram thread id's (#1145)

2024-12-21 14:54:55 +08:00

Watchlist.ts

fix: remove non-null requirement for some fields (#1175)

2024-12-22 05:56:08 +01:00