Commit Graph

79 Commits

Author SHA1 Message Date
0fe0e436aa Update docker-compose.yml 2026-04-12 16:43:36 +02:00
6d103d42c5 Merge pull request #19 from DasPoschi/claude/audit-security-performance-pWwx2
Add security hardening and XSS protection
2026-04-06 09:49:22 +02:00
Claude
a879543a1c Security audit: fix XSS, missing function, improve SSH & URL handling
- Fix XSS: HTML-escape all user input (URLs, package names, errors, proxy data)
- Fix NameError: add missing is_demo_link() function (called but undefined)
- Fix: remove unused http_in fetch in proxies_get()
- Security: mask API keys in log output (TMDB key no longer visible in logs)
- Security: use known_hosts for SSH host key verification when available
- Security: remove .env from git tracking, add .env.example template
- Usability: add URL reachability check before submitting to JDownloader
- Usability: add "Erledigte Jobs entfernen" button to clear finished/failed jobs
- Usability: color-code job status (red for failed, green for finished)
- Docs: add security section to README (known_hosts, HTTPS, .env)

https://claude.ai/code/session_01S774Pqazr2U8vkSyhUBgDs
2026-04-06 07:46:53 +00:00
44e4354d1f Merge pull request #18 from DasPoschi/codex/fix-jdownloader-api-package-removal-error-54zoo0
Detect demo link downloads and fail early
2026-01-21 21:25:03 +01:00
f87f0f5cdc Merge branch 'main' into codex/fix-jdownloader-api-package-removal-error-54zoo0 2026-01-21 21:23:26 +01:00
68353b33aa Detect demo link downloads and fail early 2026-01-21 21:22:59 +01:00
c3b1fcadfa Merge pull request #17 from DasPoschi/codex/fix-jdownloader-api-package-removal-error
Add raw MyJDownloader API fallback for removing/canceling links
2026-01-21 21:09:25 +01:00
25ad8c05d0 Add raw API cleanup fallback for JDownloader 2026-01-21 21:08:48 +01:00
b65cb53463 Merge pull request #16 from DasPoschi/codex/fetch-proxies-from-proxyscrape-api-4xe4oq
Remove proxy blacklist and HTTP proxy handling; use ProxyScrape SOCKS lists
2026-01-04 14:46:16 +01:00
6c13fbbb2f Merge branch 'main' into codex/fetch-proxies-from-proxyscrape-api-4xe4oq 2026-01-04 14:46:06 +01:00
33282ddbcb Remove proxy blacklist filters 2026-01-04 14:45:44 +01:00
7795e22744 Merge pull request #15 from DasPoschi/codex/fetch-proxies-from-proxyscrape-api-4vaqb3
Remove HTTP proxies from proxy UI
2026-01-04 14:27:14 +01:00
e83f1323cd Merge branch 'main' into codex/fetch-proxies-from-proxyscrape-api-4vaqb3 2026-01-04 14:27:07 +01:00
194b16e09c Remove HTTP proxies from UI 2026-01-04 14:26:36 +01:00
423e8e28ec Merge pull request #14 from DasPoschi/codex/fetch-proxies-from-proxyscrape-api
Use ProxyScrape API for SOCKS lists and normalize single-line responses
2026-01-04 14:20:54 +01:00
daeee039fa Update proxy sources for socks lists 2026-01-04 14:20:38 +01:00
97a5afbee9 Update app.py 2026-01-03 23:09:10 +01:00
a2de578087 Merge pull request #13 from DasPoschi/codex/configure-proxies-for-downloads-only-r44dl5
Add *.your-server.de to proxy blacklist
2026-01-03 23:04:38 +01:00
c3aac479fe Merge branch 'main' into codex/configure-proxies-for-downloads-only-r44dl5 2026-01-03 22:56:21 +01:00
1350b50199 Add your-server.de to proxy blacklist 2026-01-03 22:55:54 +01:00
6b06134edf Merge pull request #12 from DasPoschi/codex/configure-proxies-for-downloads-only
Bypass proxies for internal HTTP calls
2026-01-03 22:43:36 +01:00
be4785b04a Bypass proxies for non-download requests 2026-01-03 22:42:49 +01:00
db39f2b55e Merge pull request #11 from DasPoschi/codex/add-proxy-list-import-function-3g187r
Refresh jobs table via `/jobs` endpoint instead of full page reload
2026-01-01 22:23:09 +01:00
a0e7ed91c7 Update jobs progress without full reload 2026-01-01 22:22:41 +01:00
7443a0e0ca Merge pull request #10 from DasPoschi/codex/add-proxy-list-import-function-g3956j
Add JDProxies blacklist filters and save/export support
2026-01-01 22:12:53 +01:00
3cf7581797 Merge branch 'main' into codex/add-proxy-list-import-function-g3956j 2026-01-01 22:12:44 +01:00
e9ccb51f13 Add JDProxies blacklist filters 2026-01-01 22:12:10 +01:00
a549ba66ba Merge pull request #9 from DasPoschi/codex/add-proxy-list-import-function-q1akx1
Write JDProxies JSON export and add save endpoint/UI
2026-01-01 21:27:20 +01:00
f1267a46a1 Merge branch 'main' into codex/add-proxy-list-import-function-q1akx1 2026-01-01 21:27:13 +01:00
9baf87cc33 Write jdproxies JSON export format 2026-01-01 21:26:47 +01:00
d57948af82 Merge pull request #8 from DasPoschi/codex/add-proxy-list-import-function-p0zu8g
Export proxies as .jdproxies and add save endpoint/UI
2026-01-01 21:06:59 +01:00
93310e3d99 Merge branch 'main' into codex/add-proxy-list-import-function-p0zu8g 2026-01-01 21:06:52 +01:00
00c72a78d2 Export proxies as jdproxies file 2026-01-01 21:04:41 +01:00
2891466635 Merge pull request #7 from DasPoschi/codex/add-proxy-list-import-function
Add proxy export file support for JDownloader
2026-01-01 20:57:12 +01:00
de41769e5f Add proxy export to file for JDownloader 2026-01-01 20:56:54 +01:00
f9ba535c56 Merge pull request #6 from DasPoschi/codex/analysieren-und-beheben-von-fehlern-4xbqut
Fetch and prefill proxy lists from TheSpeedX on Proxies page
2026-01-01 20:35:46 +01:00
32f159c03a Merge branch 'main' into codex/analysieren-und-beheben-von-fehlern-4xbqut 2026-01-01 20:35:33 +01:00
30329ef72a Fetch proxy lists from upstream sources 2026-01-01 20:18:30 +01:00
1f5fa2e31d Merge pull request #5 from DasPoschi/codex/analysieren-und-beheben-von-fehlern-8ffk1k
Auto-refresh progress display
2026-01-01 20:08:58 +01:00
b42fda4852 Auto-refresh progress display 2026-01-01 20:08:34 +01:00
e8dfe28b0b Merge pull request #4 from DasPoschi/codex/analysieren-und-beheben-von-fehlern-g3are0
Add download cancel and progress display
2026-01-01 20:02:04 +01:00
0d4f030f2c Add download cancel and progress display 2026-01-01 20:01:46 +01:00
812cb08df7 Change jd-output volume from read-only to read-write 2026-01-01 19:19:31 +01:00
063c22ab86 Merge pull request #3 from DasPoschi/codex/analysieren-und-beheben-von-fehlern
Handle TMDB auth failures gracefully
2026-01-01 18:49:14 +01:00
93fc395ebc Handle TMDB auth failures gracefully 2026-01-01 18:49:00 +01:00
800f50eca7 Merge pull request #1 from DasPoschi/codex/uberprufen-und-beheben-von-fehlern
Fix MyJDownloader device status indentation
2025-12-31 13:12:20 +01:00
73756574e5 Fix MyJDownloader device status indentation 2025-12-31 13:10:35 +01:00
5bddd63ec1 Update device status handling in app.py
Change device status check to warn on non-ONLINE states.
2025-12-31 12:49:07 +01:00
7fe5a410cc Refactor device selection logic in get_device function 2025-12-31 11:55:48 +01:00
653e5fb163 Refactor device retrieval logic in get_device() 2025-12-31 11:48:42 +01:00