Gauthier 946bdecec5 Merge commit from fork ...

This PR fixes a security issue where authenticated users could access and modify data belonging to
other users. The isOwnProfileOrAdmin() middleware was missing from several push subscription API
routes. As a result, any authenticated user on the instance could manipulate the userId parameter in
the URL to view or delete the push subscriptions of other users.

2026-02-28 00:58:50 +08:00

..

settings

fix(watch-data): use sentinel values to avoid invalid SQL syntax (#2552)

2026-02-23 21:24:48 +01:00

user

Merge commit from fork

2026-02-28 00:58:50 +08:00

auth.ts

Merge commit from fork

2026-02-28 00:36:17 +08:00

avatarproxy.ts

chore: rename Jellyseerr -> Seerr, part 1 (#1984)

2025-10-06 15:22:36 -07:00

blocklist.ts

refactor: rename blacklist to blocklist (#2157)

2026-02-14 14:31:45 +01:00

collection.ts

chore: merge upstream/develop (#824)

2024-06-19 18:40:25 +05:00

discover.ts

chore(deps): upgrade prettier, and tailwind (#2351)

2026-01-29 07:48:34 +01:00

imageproxy.ts

fix(proxy): initialize image proxies after the proxy is set up (#1794)

2025-07-24 10:33:53 +02:00

index.ts

refactor: rename blacklist to blocklist (#2157)

2026-02-14 14:31:45 +01:00

issue.ts

feat(issue): add issue description preview (#1881)

2025-09-04 10:24:08 +02:00

issueComment.ts

refactor: absolute imports with path alias (#2960) [skip ci]

2022-08-22 11:02:46 +09:00

media.ts

fix(watch-data): use sentinel values to avoid invalid SQL syntax (#2552)

2026-02-23 21:24:48 +01:00

movie.ts

fix(tmdb): fallback movie/show overview to English when none is available in requested locale (#928)

2024-08-13 10:41:59 +02:00

overrideRule.ts

feat: override rules (#945)

2024-12-29 05:20:35 +08:00

person.ts

chore: merge upstream/develop (#824)

2024-06-19 18:40:25 +05:00

request.ts

refactor: rename blacklist to blocklist (#2157)

2026-02-14 14:31:45 +01:00

search.ts

chore: merge upstream/develop (#824)

2024-06-19 18:40:25 +05:00

service.ts

fix: remove language profiles dropdown for Sonarr v4 (#1000)

2024-10-24 18:34:01 +02:00

tv.ts

fix(tvdb): respect display language when fetching metadata (#1889)

2025-09-08 20:20:21 +08:00

watchlist.ts

fix(watchlist): add validation for creation request

2023-05-15 23:25:32 +07:00