Skip to content

Rebase - #1

Open
digitizdat wants to merge 242 commits into
digitizdat:masterfrom
spl0k:master
Open

Rebase#1
digitizdat wants to merge 242 commits into
digitizdat:masterfrom
spl0k:master

Conversation

@digitizdat

Copy link
Copy Markdown
Owner

No description provided.

spl0k and others added 30 commits September 6, 2020 15:08
Some (if not all) just ignore the response if it's not a 200
and just consider the server borked.

Closes #192
The main motive here isn't full Windows support per, but being
able to run tests on Windows, as this is my main platform.
Booting a VM just to run tests is cumbersome.
Except for changes required to comply to the XSD specification,
this does not include any feature this version brings

Closes #194
We have int folder ids for long now, this isn't needed anymore
Bare excepts will catch `GeneratorExit` exceptions which are raised
whenever a generator stops. This was causing issues when transcoding and
caching the results.

All instances of bare excepts have been replaced with scoped versions.
Hunting for the last ResourceWarnings
spl0k added 30 commits November 8, 2025 16:05
Service isn't available anymore
- `supysonic-server` now binds to localhost by default instead of all IPv4 interfaces
- a bit of cookie configuration
- no more open redirect on web UI login
RCE surface was the command serialization. Would have required an attacker to:
- get their hands on the authkey (or the database, since it's stored there)
- have access to the daemon socket (a Unix socket or Windows pipe by default)
With serialization changed, the RCE risk is no more.
Also optimize its queue for large batches while we're are it
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.