Commit graph

493 commits

Author SHA1 Message Date
Speng Reb
36da4bdff1 Harden API and session security: enforce CSRF on cookie-auth /api/v1 writes, exempt bot bearer tokens, and set SameSite=Lax + conditional Secure on auth/CSRF/ip-session cookies 2026-05-21 16:25:34 +02:00
Speng Reb
6eeee342d7 Protect /api/v1 mutations with CSRF for cookie auth while exempting cbt_ bearer bot tokens and wiring UI X-CSRF-Token headers 2026-05-21 16:23:30 +02:00
Speng Reb
12696452aa Fix shows/bot API auth gaps, handle missing channels as 404, make recurrence DST-safe, and clear lint regressions 2026-05-21 16:13:56 +02:00
Spengreb
03922e8484
Merge pull request #13 from Spengreb/emote-substring-search-ux
Emote substring search ux
2026-05-21 15:06:22 +02:00
Speng Reb
73c90d8802 Merge branch 'emote-substring-search' into emote-substring-search-ux 2026-05-21 15:04:26 +02:00
Speng Reb
341b91aad1 Improve UX for emote auto complete 2026-05-21 15:03:56 +02:00
Speng Reb
c49ff4bac1 Fix bug where force start did not force starting the show 2026-05-21 14:14:47 +02:00
Speng Reb
c4ee655d15 Shows playlist editor now shows media title instead of ID 2026-05-20 21:10:49 +02:00
Speng Reb
56ab732f6b Better handling of TZ and Bot API added 2026-05-20 21:00:48 +02:00
Speng Reb
17f38874d1 Add a scheduled show concept to the project without bot API for now 2026-05-20 20:52:26 +02:00
Speng Reb
dc70e1236b Initial bot API v1 2026-05-04 16:07:59 +02:00
Speng Reb
6efb8902fa Remove bad protoswitching from previous commit 2026-04-21 00:27:20 +02:00
Spengreb
80cd107aa0
Merge pull request #3 from Spengreb/tv-layout
Add TV layout mode
2026-04-21 00:11:45 +02:00
Speng Reb
f3cfe74cfa Add TV layout mode 2026-04-21 00:08:25 +02:00
Spengreb
917b227ff5
Merge branch 'calzoneman:3.0' into 3.0 2026-03-18 23:17:04 +01:00
Xaekai
eac1547aea Resolve #1011 2025-11-06 15:58:48 -08:00
Speng Reb
f12115159e Accepts whep from streem.vereto.net 2025-07-22 01:02:34 +02:00
Zankaria
9738c3f8c8 Add support for unix socket connections to the mysql database 2024-09-19 19:25:10 -07:00
Kethsar
2c541448a2 Set the cap for max-chat-message-length to 1000 2023-03-25 14:31:25 -07:00
Kethsar
21d7f16413 Fix missed expansion of the option 2023-03-25 14:31:25 -07:00
Kethsar
87198bd4e7 Expand chat message length option to be consistent with other options 2023-03-25 14:31:25 -07:00
Kethsar
986207b46b Add max chat message length config option 2023-03-25 14:31:25 -07:00
Calvin Montgomery
c78ef333da Fix a couple issues discussed on IRC 2023-01-11 17:57:02 -08:00
Calvin Montgomery
fad1da7ab4 deps: fix high sev warnings 2023-01-10 20:56:38 -08:00
Calvin Montgomery
306e3adde8 Work around flaky test 2022-09-23 21:39:38 -07:00
Calvin Montgomery
99740a3673 Add cache, test 2022-09-23 21:39:38 -07:00
Calvin Montgomery
913348d46e Continue working on banned channels 2022-09-23 21:39:38 -07:00
Calvin Montgomery
ae5dbf5f48 Continue working on banned channels 2022-09-23 21:39:38 -07:00
Calvin Montgomery
8338fe2f25 Work on banned channels feature 2022-09-23 21:39:38 -07:00
Xaekai
7921f41174 Fix inadvertent code reversions 2022-09-18 20:04:42 -07:00
Calvin Montgomery
9e0f7b8efa Tweaks 2022-09-18 19:10:36 -07:00
Xaekai
f185e6c3ea Add audioTracks support for custom manifests 2022-09-18 19:10:36 -07:00
Xaekai
45217ccad8 Add Niconico support 2022-09-18 19:10:36 -07:00
Xaekai
a2c4ea5036 Add Odysee support 2022-09-18 19:10:36 -07:00
Xaekai
1790d5b569 Add BandCamp support 2022-09-18 19:10:36 -07:00
Xaekai
97b8d1b4b7 Enable caching BitChute metadata 2022-09-18 19:10:36 -07:00
Xaekai
25ddc336e0 Use child iframe for BitChute
By using an iframe we can take advantage of the referrer meta tag,
while still being able to scaffold everything relatively easily because it's same-origin
2022-09-18 19:10:36 -07:00
Xaekai
8774dc89e7 Fixup Livestream.com 2022-09-18 19:10:36 -07:00
Xaekai
16f183c117 Add BitChute support 2022-09-18 19:10:36 -07:00
Xaekai
f929758bfd Improve the ESLint situation 2022-09-18 19:10:36 -07:00
Xaekai
d516c5ebfc Add PeerTube support 2022-09-18 19:10:36 -07:00
Xaekai
0e3307b9f4 Remove references to defunct services
Imgur discontinued support for albums
SmashCast/Hitbox disappeared
Ustream was sunset by IBM
Mixer is dead
Picasa is long dead
Vidme is long dead
IE11 is dead
2022-09-18 19:10:36 -07:00
Calvin Montgomery
dcfcee9a23 Accept #946 2022-05-17 21:13:50 -07:00
Calvin Montgomery
fd451fe9d2 Require at least one vote to skip 2022-05-09 20:25:34 -07:00
Calvin Montgomery
af62fbaef4 Fix #924 2021-10-13 20:12:31 -07:00
Calvin Montgomery
1f10f0f09c Fix eslint error 2021-08-19 20:55:40 -07:00
Calvin Montgomery
edb5f94b7c Add a POST flow to password recovery (#871) 2021-08-19 20:55:02 -07:00
Calvin Montgomery
394f03ee1c Remove some legacy cruft 2021-08-19 20:44:57 -07:00
Calvin Montgomery
7214b7c474 Upgrade to socket.io v4 2021-08-19 20:36:04 -07:00
Calvin Montgomery
1b7e7c74f5 Remove legacy counters 2021-08-19 20:36:04 -07:00