Commit graph

214 commits

Author SHA1 Message Date
Max
96e73576af
set content-type for customjavascript (#3612)
* set content-type for customjavascript

* change content-type in order to comply with RFC 9239
2024-03-04 21:40:57 -08:00
Gabe Kangas
7399bee276
Gek/cache bot search page (#3530)
* feat: add general purpose key/val caching layer

* feat: cache bot/metadata response page for 10 seconds
2024-01-21 17:18:47 -08:00
Gabe Kangas
1b14800c7d
fix(api): protect emoji delete api from path traversal exploit 2024-01-20 20:30:29 -08:00
Gabe Kangas
bb7de347c5
chore: reverting the current implementation of http response caching 2023-12-19 18:27:42 -08:00
Gabe Kangas
e235c7aea2
chore: remove reponse cache from root route 2023-12-11 20:19:50 -08:00
Gabe Kangas
0827af6cc8
fix: split out the botscraper response cache from the web app 2023-12-10 18:14:26 -08:00
Gabe Kangas
c8985093fb
fix(video): fix hls in-memory cache being recreated on every request 2023-12-10 12:28:35 -08:00
Gabe Kangas
2217f0614a
feat(api): add server-side caching for requests that could benefit (#3463)
* feat(api): add server-side caching for requests that could benefit for them

* fix(tests): do not cache responses while in tests

* fix: remove commented out leftover code

* chore(deps): update dependency html-webpack-plugin to v5.5.4

* Bundle embedded web app

* fix: remove caching for web app assets under test

* chore(tests): re-enable temporarily disabled test

* chore(deps): update dependency typescript to v5.3.3

* Bundle embedded web app

* chore(deps): update dependency npm to v10.2.5

* Bundle embedded web app

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Owncast <owncast@owncast.online>
2023-12-09 16:31:50 -08:00
Gabe Kangas
56eb2a4785
chore(lint): silence linter warnings 2023-10-21 09:46:45 -07:00
Gabe Kangas
8e79e2acfa
chore(go): run betteralign and gofumpt on codebase 2023-10-08 14:22:28 -07:00
Gabe Kangas
169c11596c
feat(chat): add support for chat part messages. Closes #3201 (#3291) 2023-09-10 10:58:11 -07:00
Shreyas
062de79920
Block Private URLs at serverurl API endpoint (#3295)
* Block Private URLs at `serverurl` API endpoint

* Block Private URLs at `serverurl` with `net/netip`
2023-09-06 20:28:15 -07:00
Gabe Kangas
1e57cff3e0
fix: use lightweight bot/scraper html responses. Fixes #3253 2023-08-16 18:19:09 -07:00
mrsoong
b0c50fb8e5
Fixed localhost IP ban (#3183) 2023-07-17 19:06:58 +00:00
Gabe Kangas
f9d0d66271
feat(chat): cache custom emoji. For #3117 2023-06-27 15:19:48 -07:00
Yusuke
7fc5857d4c
Fix path for image open meta tag #3075. (#3087)
* Commit updated API documentation

* Fix content path used for meta tags.

TT:#3075

* Fix lint for go code.

TT:#3075

* Revert docs/api/index.html

TT:#3075

---------

Co-authored-by: Owncast <owncast@owncast.online>
2023-06-13 19:28:35 -07:00
Gabe Kangas
9b44ff107f
fix(api): validate stream key payload. Closes #3082 2023-06-13 13:05:43 -07:00
Gabe Kangas
af82d05421
fix(api): explicitly disable caching on api responses 2023-06-05 08:52:00 -07:00
Gabe Kangas
cd458630ec
Support using the custom video serving endpoint even if you don't use object storage (#2924)
* feat(video): refactor video serving endpoint

It can now be used without an object storage provider. Closes #2785

* fix: remove debug log
2023-05-30 14:05:24 -07:00
Gabe Kangas
15dc718e61
feat: add support for robots.txt disabling search indexing (#2929)
* feat: add support for robots.txt

Can toggle disabling search engine indexing. Closes #2684

* fix: unexport ts const
2023-05-30 11:09:51 -07:00
Gabe Kangas
85e7af3d5f
Update to Go 1.20 + run better align (#2927)
* chore(go): update go version to 1.20. Closes #2185

* chore(go): run better align against project

To optimize struct field order. Closes #2870

* chore(go): update CI jobs to use Go 1.20

* fix(go): linter warnings for Go 1.20 update
2023-05-30 10:31:43 -07:00
Gabe Kangas
a3e890ff7a
Fix linter errors to reflect update to Go 1.20 2023-05-28 12:38:51 -07:00
Gabe Kangas
7aca27cb08
feat: add support for markdown in offline message. Closes #2921 (#2977) 2023-05-01 19:45:27 -07:00
Gabe Kangas
e86caad06f
Return hideViewerCount in config and set the admin switch correctly. Closes #2887 2023-03-31 22:15:28 -07:00
Pranav Joglekar
07c5cabfe8
Trigger the title updated webhook event whenever a title is changed (#2823)
* wip: trigger the title updated webhook event whenever a title is changed

* Commit updated API documentation

* fix: add STREAM_TITLE_CHANGED to list of valid events

* feat: Add support for STREAM_TITLE_CHANGED webhook event on admin dashboard

* fix: transmit webhook event after stream has changed to fix race conditions where older title was sent

---------

Co-authored-by: Owncast <owncast@owncast.online>
2023-03-28 11:34:00 -07:00
Gabe Kangas
23a721857f
Do not support stream key UI or any persisted stream keys when overridden via cli flag. Closes #2749 2023-02-27 17:08:52 -08:00
Gabe Kangas
25abcc23a8
Fix thumbnail path. Closes #2732 2023-02-24 15:56:49 -08:00
Gabe Kangas
049a9d0080
Only show auth message if name changed 2023-01-30 11:20:03 -08:00
Gabe Kangas
484b5d2a49
Fix lint warning 2023-01-18 22:45:21 -08:00
Gabe Kangas
19c228eaf6
Allow adding custom javascript to the page. Closes #2604 2023-01-18 22:38:24 -08:00
Michael David Kuckuk
59e5cfefd4
Remove twitter notification configuration (#2598) 2023-01-17 13:20:29 -08:00
Gabe Kangas
0eba1685b3
Return the actual display name, not the proposed one 2022-12-29 14:52:15 -08:00
Gabe Kangas
0c03773c4c
Sanitize+truncate display names on registration+change. For #2527 2022-12-29 14:13:22 -08:00
Gabe Kangas
3819335090
Return error when data not found in logo upload API 2022-12-28 15:21:26 -08:00
Gabe Kangas
8890b564e8
Do not pass along the raw error. Closes #2491 2022-12-24 20:35:46 -08:00
Gabe Kangas
87eeeffa1c
Prune expired auth requests + add global max limit. Closes #2490 2022-12-23 20:25:08 -08:00
Gabe Kangas
0ebb968074
Handle subdirectories of emoji in copying, fetching and deleting. For #1916 2022-12-16 20:23:58 -08:00
Gabe Kangas
3abc7a3ab8
Expose connected client ID to moderator client info api 2022-12-13 19:17:32 -08:00
Gabe Kangas
2fdbb1e482
Support CSP nonce for webv2. Closes #2127 2022-12-12 17:04:00 -08:00
Philipp
dc54dfe363
Feature: emoji editor (#2411)
* Custom emoji editor: implement backend

This reuses the logo upload code

* Implement emoji edit admin interface

Again reuse base64 logic from the logo upload

* Allow toggling between uploaded and default emojis

* Add route that always serves uploaded emojis

This is needed for the admin emoji interface,
as otherwise the emojis will 404 if custom emojis are disabled

* Fix linter warnings

* Remove custom/uploaded emoji logic

* Reset timer after emoji deletion

* Setup: copy built-in emojis to emoji directory
2022-12-12 08:40:43 -08:00
Meisam
a7080a1fc1
validate response of federation APIs (#2408)
* validate json responses

* update deps

* tmp disable header check

* log all the webfinger fails

refactor and filter more malformed requests

* don't set incorrect serverURL strings

* test failing through admin api

* fix server url in fedi tests

* check response.text

* validate json/xml response of all apis

test Content-Type of api response and cleanup

* improve logs

* fix rebase

* cleanup json parser in api tests

* mark the api tests performed by admin

* Separate check for reading and format of serverURL

* test /federation/user/ with wrong username in ci
2022-12-10 21:10:10 -08:00
Gabe Kangas
c4dc802941 Make stream keys objects with comment instead of string slice 2022-11-29 16:05:44 -08:00
Gabe Kangas
c9e3ccad45 API + Data changes to support split up of stream keys and admin passwords 2022-11-29 16:05:44 -08:00
Gabe Kangas
813f8692f0
Support color customization from the admin (#2338)
* Add user-customizable theming. Closes #1915

* Prettified Code!

* Add user-customizable theming. Closes #1915

* Add explicit color for page content background

* Prettified Code!

Co-authored-by: gabek <gabek@users.noreply.github.com>
2022-11-12 20:26:55 -08:00
Gabe Kangas
c844e98a19
Merge remote-tracking branch 'origin/develop' into webv2 2022-10-12 16:52:05 -07:00
Florian Lehner
203f669ca8
preallocate memory (#2201)
**What this PR does / why we need it:**

Preallocate memory instead of enforcing an incremental growth. This will result in less work for the garbage collector.
2022-10-12 16:37:26 -07:00
Gabe Kangas
d94723bd3a
Fix embeds not loading on prod builds. Closes #2186 2022-10-10 14:06:02 -07:00
Gabe Kangas
7fb97c56aa
Merge remote-tracking branch 'origin/develop' into webv2 2022-10-02 21:44:06 -07:00
Matt Owens
39327f6b4a
remove extra w.WriteHeader call (#2158) 2022-10-02 13:47:38 -07:00
Matt Owens
e20985ecb4
Treat fediverse usernames as case-insensitive (#2155)
* treat fediverse usernames as case-insensitive for auth

* add test for case insensitive, clean up duplicate import in federverse auth controller

* fix test, there was an issue with state when all the tests were run
2022-10-02 11:16:46 -07:00