Deluan
387acc5f63
Add public endpoint to expose images
2023-01-13 22:18:34 -05:00
Deluan
6260927074
Serve artist placeholder directly, instead of using LastFM's CDN
2022-12-30 20:14:03 -05:00
Deluan
1b5f855bff
Compress more http content-types.
...
Also, some minor refactoring
2022-11-26 13:13:05 -05:00
Deluan
db67c1277e
Fix error comparisons
2022-09-30 18:54:25 -04:00
Manuel
72cde6dfde
fix:(middlewares.go) - Set Cookie SameSite mode to Strict - 1776 ( #1777 )
...
* None is deprecated and will fallback to Lax in the future.
* Using Strict is future proof and provides additional CSR protection
Signed-off-by: Manuel Kroeber <manuel.kroeber@gmail.com>
Signed-off-by: Manuel Kroeber <manuel.kroeber@gmail.com>
2022-09-27 17:58:47 -04:00
Brice Johnson
6d947f6f7e
Allowing 3rd party UIs to access x-total-count http header ( #1470 )
...
* Adding 'x-content-duratin' and 'x-total-count' to CORS exposed headers
* Moving cors setup to middlewares.go
* adding x-nd-authorization to exposed headers
2021-11-19 10:07:54 -05:00
Deluan
47bcf719f2
Fix cookie warning
2021-06-20 13:27:50 -04:00
Deluan
b65e76293a
Only send events to clients who need it
...
- User events (star, rating, plays) only sent to same user
- Don't send to the client (browser window) that originated the event
2021-06-15 18:59:26 -04:00
Deluan
7d96167abc
Upgrade to go-chi 5
2021-05-11 17:21:18 -04:00
Dnouv
089d4abab1
Replace Feature Policy with Permissions Policy ( #1112 )
...
* Add Permissions Policy
* Remove Display capture option
2021-05-11 11:29:55 -04:00
Deluan Quintão
2d528bbc87
Remove dependency of go-bindata ( #818 )
...
* Use new embed functionality for serving UI assets
* Use new embed functionality for serving resources. Remove dependency on go-bindata
* Remove Go 1.15
2021-03-12 11:06:51 -05:00
Deluan
6ee45a9ccc
Move project to Navidrome GitHub organization
2021-02-06 21:46:35 -05:00
Deluan
92b7ef40af
Disable CSP for now
2020-10-06 11:24:59 -04:00
Deluan
cd171c40cb
Add secure middleware, with sensible values
2020-10-06 08:46:58 -04:00
Deluan
8dfc259857
Serve robots.txt from root ( http://server/robots.txt )
2020-10-02 10:15:19 -04:00
Deluan
9f42e330b4
fix: change web requests log level to debug
2020-03-21 13:03:04 -04:00
Deluan
d2eea64528
fix: typo
2020-02-23 21:41:10 -05:00
Deluan
203754726b
refactor: better request logging
2020-02-01 20:07:15 -05:00
