admin
1190d218af
Add log sanitization for CodeQL log forging alerts
2025-12-18 20:17:42 -06:00
admin
b1f50bae97
Fix deadlock risk in ReleasePushController with async SemaphoreSlim
2025-12-18 20:02:15 -06:00
admin
2b19ec07ff
fix: resolve technical debt and npm vulnerabilities
...
NPM Security (0 vulnerabilities remaining):
- Add yarn resolutions for cross-spawn, brace-expansion, color-string, glob, postcss
Bug fixes:
- Bug-002: Use FirstOrDefault with null check (DownloadStationTaskProxyV2)
- Bug-007: Fix inverted exception logic for magnet fallback (TorrentClientBase)
- Bug-008: Fix stale closure using ref (MovieSearchInput)
- Bug-009: Fix Number.Number.parseInt typos across 50+ files
- Bug-010: Add regex timeout and Compiled flag (RegexReplace)
- Bug-011: Add null checks for XML queries (ConfigFileProvider)
- Bug-012: Remove empty touch handler (MovieDetails)
- Bug-013: Use Path.GetFileName for safer check (InstallUpdateService)
- Bug-014: Return Ok instead of Accepted for sync PUT (MovieController)
- Bug-016: Fix double bracket typo in log message (InstallUpdateService)
- Bug-017: Add console.warn to catch block (MovieTagInput)
- Bug-018: Remove stray debug console.log (SignalRConnector)
- Bug-019: Document disabled regex with ReDoS justification (Parser)
2025-12-18 19:54:02 -06:00
admin
5c51367bec
fix(security): sanitize user-controlled strings in log statements
...
Add SanitizeForLog() extension method to prevent log forging attacks
by replacing control characters (newlines, etc.) with spaces. Applied
across 30 files that log user-controlled data like paths, titles,
URLs, and usernames.
Fixes CodeQL log-forging alerts.
2025-12-18 17:17:02 -06:00
admin
9c0e11b40b
refactor: remove redundant boolean literals (S1125)
...
Replace == false with negation operator, remove == true comparisons
2025-12-18 16:31:05 -06:00
admin
021fd9b55e
perf: use char overloads for StartsWith/EndsWith (S6610)
...
Use single character overloads instead of single-character string
overloads for better performance.
2025-12-18 16:17:37 -06:00
admin
6b67a1672c
refactor: seal non-derived private classes (S3260)
...
63 private nested classes marked as sealed since they have no derived classes.
2025-12-18 16:05:31 -06:00
admin
b5bcb14d75
refactor: make methods static where instance data not used (S2325)
...
~243 methods converted to static where they don't access instance data.
Fixed call sites that needed to use type name instead of instance.
2025-12-18 16:02:13 -06:00
admin
aa748bfaa6
refactor: reduce LanguageParser cognitive complexity
...
Replace 40+ individual if statements with dictionary-based lookup.
Extract helper methods for keyword, case-sensitive regex, and
case-insensitive regex language detection. Original method reduced
from ~400 lines to ~17 lines while preserving all behavior.
2025-12-18 15:48:31 -06:00
admin
6a4fb133b5
refactor: reduce MyAnonamouseParser cognitive complexity
...
Extract helper methods for author parsing, title flags, and freeleech
detection to simplify the main ParseResponse loop.
Addresses #30
2025-12-18 15:43:56 -06:00
admin
9de2f9a168
refactor: replace ApplicationException with domain-specific exceptions
...
Create custom exception classes:
- InvalidDatabaseSchemaException for migration errors
- ServiceInstallationException for service install failures
- DataRetrievalException for repository query mismatches
- InvalidRequestException for HTTP request validation
- InvalidHeaderException for HTTP header validation
Resolves SonarCloud S3988 (ApplicationException usage).
2025-12-18 15:37:21 -06:00
admin
f7a196dec6
fix: add timeout to regex for DoS prevention
2025-12-18 15:02:41 -06:00
admin
fb6e131d68
fix: address code review findings
...
- Fix Torznab default definition protocol (Usenet -> Torrent)
- Add try-catch around JSON deserialization in MAM parser
- Add logging for author info parse failures
- Add null check for JSON response
2025-12-18 14:51:22 -06:00
admin
2045f39037
feat(ui): add media type badge to poster view
2025-12-18 14:42:42 -06:00
admin
bd6f7ece9c
feat(indexer): enable book and audiobook support in Newznab/Torznab
2025-12-18 14:37:01 -06:00
admin
2bf1fe4367
feat(indexer): add MyAnonamouse indexer for books and audiobooks
2025-12-18 14:34:50 -06:00
admin
6328e72c96
Merge remote-tracking branch 'origin/develop' into feature/indexer-management
2025-12-18 14:22:33 -06:00
dependabot[bot]
f5bee00f7c
Bump the nuget group with 1 update
...
Bumps System.Private.Uri from 4.3.0 to 4.3.2
---
updated-dependencies:
- dependency-name: System.Private.Uri
dependency-version: 4.3.2
dependency-type: direct:production
dependency-group: nuget
- dependency-name: System.Private.Uri
dependency-version: 4.3.2
dependency-type: direct:production
dependency-group: nuget
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-12-18 20:00:46 +00:00
admin
ef296bc95e
feat(indexer): add book/audiobook search criteria
...
Add search criteria classes and update request generators:
- BookSearchCriteria (Author, Title, ISBN, Publisher, Year)
- AudiobookSearchCriteria (Author, Title, Narrator, ASIN, ISBN)
- Updated IIndexerRequestGenerator interface
- Implemented book/audiobook search in NewznabRequestGenerator
- Added stub implementations to all other request generators
2025-12-18 13:25:20 -06:00
admin
86faa9aef7
feat(indexer): add multi-media type foundation
...
Add MediaType enum and indexer support for books/audiobooks:
- MediaType enum (Movie, TV, Music, Book, Audiobook, Podcast, Comic)
- NewznabStandardCategory constants for all media types
- Database migration 243 for SupportedMediaTypes column
- Updated IndexerDefinition, IIndexer, IndexerBase
- Updated README with current project status
2025-12-18 13:19:16 -06:00
Cody Kickertz
09b1d24ce8
Merge pull request #17 from cheir-mneme/feature/unpackerr
...
feat(download): add automatic archive extraction (Unpackerr)
2025-12-18 11:50:53 -06:00
admin
e43ea2682c
fix(style): remove unused using, use AsSpan over Substring
2025-12-18 11:38:55 -06:00
admin
0502343800
fix(style): use explicit JsonSerializerOptions type
2025-12-18 11:38:05 -06:00
admin
79481d5491
fix(style): use explicit HashSet type for StyleCop SA1000
2025-12-18 11:22:59 -06:00
admin
ee7da59382
fix(style): use explicit HashSet type for StyleCop SA1000
2025-12-18 11:22:43 -06:00
admin
5c2378a1e6
feat(download): add automatic archive extraction (Unpackerr absorption)
...
- Add SharpCompress for RAR/7z support
- Extend ArchiveService with RAR, 7z extraction via SharpCompress
- Add DownloadExtractionService for orchestrating extraction
- Add config: AutoExtractArchives (default: false)
- Add config: DeleteArchiveAfterExtraction (default: true)
- Integrate extraction into CompletedDownloadService
Note: UI settings page not yet implemented - backend foundation only.
2025-12-18 11:13:29 -06:00
admin
abfa1bde8b
fix(security): address pre-release security blockers
...
- Reject unknown sender types in certificate validation
- Disable auto-redirect in SkyHookProxy to prevent HTTPS downgrade
- Use proper JSON serialization in InitializeJsonController
- Add whitelist validation for Type.GetType in converters
2025-12-18 11:12:57 -06:00
admin
fbb205c2b6
refactor: remove empty housekeeping classes and commented properties
2025-12-18 10:07:30 -06:00
admin
d9597db83f
refactor: rename project from Logarr to Aletheia
2025-12-18 09:41:48 -06:00
admin
ebde5f3a27
fix: resolve build issues for local development
2025-12-17 20:27:48 -06:00
admin
b8c130c73d
fix(security): patch SQL injection, path traversal, command injection
2025-12-17 19:30:35 -06:00
admin
b600beb3ea
feat(privacy): remove telemetry, analytics, fingerprinting
2025-12-17 18:41:03 -06:00
admin
b6837de9f4
feat: initial project branding and setup
2025-12-17 17:45:37 -06:00
Erik Frantz
4c00729183
Fix: ( #11303 ) collection API error when using Movie CollectionThe ( #11304 )
...
Co-authored-by: Bogdan <mynameisbogdan@users.noreply.github.com>
2025-12-10 20:56:11 +01:00
Robin Dadswell
b59ff0a3b1
Skip proxy tests on MacOsX
2025-11-27 10:14:47 +00:00
Stevie Robinson
949922b9a1
New: add TTL setting for pushover notifications
...
(cherry picked from commit 317cdf15582746bd4e713d6b99e17a21dcb8abeb)
2025-11-19 08:10:22 +01:00
Mark McDowall
90cd8df1ae
Add private IPv6 networks
...
(cherry picked from commit 52972e7efcce800560cbbaa64f5f76aaef6cbe77)
2025-11-09 10:20:36 +00:00
Mark McDowall
7d8444c435
Set known networks to RFC 1918 ranges during startup
...
(cherry picked from commit d10107739b9ed6a50165e5dd1dfae15c7e8aea56)
2025-10-30 09:37:21 -05:00
Polgonite
1883ae52ac
Fixed: qBittorrent /login API success check
2025-10-29 17:59:53 -05:00
Bogdan
955ee2f29b
Switch to FluentMigrator.Runner.Core to avoid extranous platform runners
...
(cherry picked from commit f93100d9fd1deb2982dbd154dd05032b17099774)
2025-10-25 12:51:40 -05:00
Bogdan
24639a7016
Pin System.Drawing.Common to 8.0.20
...
(cherry picked from commit b9a79c4225b85230b4fdec702621c7b0f41c6ae1)
2025-10-05 18:36:38 -05:00
Bogdan
cf465899b4
New: Retry SQLite writes for database is locked errors
...
(cherry picked from commit 2e1289b9248a70ce50bde52a66d3a589f3dcb8f5)
2025-09-28 21:57:01 -05:00
Mark McDowall
e63691935d
Upgrade MonoTorrent to 3.0.2
...
(cherry picked from commit b0224c1c5cf00c8959c67d9e61f3e932800060c4)
2025-09-28 21:57:01 -05:00
Bogdan
1bae9499e4
Bump System.Data.SQLite to official 2.0.2
...
(cherry picked from commit 89ed33e1ac10a8b50082e47c604501a848ece3ea)
2025-09-28 21:57:01 -05:00
Bogdan
c991a8927d
Bump FluentMigrator to official 6.2.0
...
(cherry picked from commit 82299cfc04732371e6709612cdb7d8d4eaf6ead3)
2025-09-28 21:57:01 -05:00
Bogdan
1e06fc5b43
Switch HttpProxySettingsProviderFixture to test cases
...
(cherry picked from commit 4e8fe6e81b1ac3f53135ad2e2b95d7aae811b87e)
2025-09-28 21:57:01 -05:00
Bogdan
52307038af
Bump Moq to 4.18.4
...
(cherry picked from commit 90bb9b513cb1ac874bfa9a0a7b12b7fa7b8ede5a)
2025-09-28 21:57:01 -05:00
Bogdan
0297dba7f9
Attempt to remove pid file only if config folder exists
...
(cherry picked from commit df4a56662f6870a194179ffc29c98dc64af9e07c)
2025-09-28 21:57:01 -05:00
Bogdan
554a54b009
Improve error tracing in migrate app data folder
...
(cherry picked from commit 5ef6145db350df36507b3efaf1f8f412c1a13779)
2025-09-28 21:57:01 -05:00
nuxen
64b2a10b3f
Fixed: RlsGrp parser exeption for 126811
2025-09-27 19:39:59 -05:00