Commit Graph

3183 Commits

Author SHA1 Message Date
c25d664edc Clean useless database arguments (2/5) 2022-01-04 17:15:43 +01:00
9bad7e2940 Clean useless database arguments (1/5) 2022-01-04 17:15:43 +01:00
6704ce3214 Move DB utility functions to the proper module 2022-01-04 17:15:43 +01:00
914cfbd953 Move DB queries related to 'annotations' in a separate module 2022-01-04 17:15:43 +01:00
85cf27119c Move DB queries related to playlists in a separate module (3/3) 2022-01-04 17:15:43 +01:00
7691f53520 Move DB queries related to 'users' in a separate module (2/2) 2022-01-04 17:15:43 +01:00
094f835642 Move DB queries related to 'users' in a separate module (1/2) 2022-01-04 17:13:52 +01:00
92eea3b18b Move DB queries related to session tokens in a separate module 2022-01-04 17:13:52 +01:00
c021b93b5c Move DB queries related to channels in a separate module 2022-01-04 17:13:52 +01:00
d94d4c2045 Move DB queries related to statistics in a separate module 2022-01-04 17:13:52 +01:00
46d08237c6 Move DB queries related to playlists in a separate module (2/3) 2022-01-04 17:13:52 +01:00
3deafe9f8d Move DB queries related to playlists in a separate module (1/3) 2022-01-04 17:13:51 +01:00
998edba6f0 Move DB queries related to 'videos' in a separate module 2022-01-04 17:13:51 +01:00
a779cdd463 Merge pull request #2727 from SamantazFox/add-shorts-support
Add support for shorts
2021-12-28 22:13:36 +01:00
fc2b9031d4 i18n: Add Serbian back 2021-12-22 00:52:08 +01:00
28a6589a1e Merge pull request #2538 from bbielsa/player-remember-position
Retain video time position in video player
2021-12-21 22:05:43 +01:00
ddb06b0cac Fix XSS vulnerability in channel playlists
The channel/<ucid>/playlists page was vulnerable to Cross Site Scripting
(XSS), because the different URL parameters were inserted as-is in the URL
meant for instance switching.

This vulnerability could allow an attacker to inject malicious Javascript
in the page by tricking the user to click on a crafted link.

Bug introduced in commit 66e7285108
("Only use /redirect when automatically redirecting").

Thanks to Jack (@testa:cthd.icu on Matrix, @cysea on github) for responsibly
reporting this issue!
2021-12-19 20:51:44 +01:00
f54e247eb4 Extractors: Add support for shorts
Fixes #2708
2021-12-17 16:47:41 +01:00
b90bceb2dc Fix formatting of preferences.cr and videos.cr 2021-12-15 19:38:58 +01:00
f31bd5ffb9 Use localization for save player position label in the preferences page 2021-12-15 19:38:56 +01:00
5abe7fe123 Rename 'remember_position' to 'save_player_pos' for clarity 2021-12-15 19:37:55 +01:00
a6a0bbf398 Add remember_position field to the Preferences and VideoPreferences structs, and add a checkbox in the preferences page to toggle it 2021-12-15 19:37:55 +01:00
ee91effb7a Merge pull request #2576 from SamantazFox/fix-locales-handling
Fix locales handling
2021-12-12 22:26:22 +01:00
f236a6872b Merge pull request #2659 from SamantazFox/fix-likes-dislikes
Fix likes/dislikes
2021-12-06 03:52:38 +01:00
3e0096f360 Merge pull request #2683 from iv-org/SamantazFox-patch-1
Fix #2682
2021-12-02 15:35:00 +01:00
438b334320 Merge pull request #2671 from matthewmcgarvey/code-removal
Remove dead code
2021-12-01 20:49:23 +01:00
4aa96ecab9 Use 'dig()' in 'find()' statements 2021-12-01 17:32:10 +01:00
7b9d26d688 Fix #2670
Fixes "Download widget replaces spaces in filename with +"
https://github.com/iv-org/invidious/issues/2670
2021-11-29 23:12:55 +01:00
8d4b4cd14c Remove dead code 2021-11-29 09:11:50 -06:00
342fc202a7 Fix #2682
Fix "Missing param name: "q" (KeyError)"
https://github.com/iv-org/invidious/issues/2682
2021-11-29 14:53:27 +01:00
4436359d07 Use dig to get category contents
Co-authored-by: Matthew McGarvey <matthewmcgarvey14@gmail.com>
2021-11-28 23:44:37 +01:00
91f8395222 Typo: missing '?' when looking for key in dislikes_button
Co-authored-by: Matthew McGarvey <matthewmcgarvey14@gmail.com>
2021-11-28 23:37:27 +01:00
de00e86cd5 Decompress the response body ourselves
Temp fix for #2612
2021-11-28 18:04:12 +01:00
c6e086c6ff Revert "Temporarily fix for #2612" (#2673) 2021-11-28 09:41:16 +01:00
82f3eda82b Merge pull request #2656 from SamantazFox/fix-2549
extract_video_info: Make sure that the Android player response is valid
2021-11-28 02:38:29 +01:00
05f9613e14 Merge pull request #2623 from SamantazFox/temp-decompression-fix
Temporarily fix for #2612
2021-11-28 02:35:39 +01:00
ceb1feb350 likes/dislikes: better fallback management
'.to_i64?' instead of '.to_i64' returns nil rather than raising
an exception when it's done on an empty string.

In some rare cases, rating can be equal to 5. In this case, the
value of player_response[videoDetails][averageRating] is an
Int and not a Float.
2021-11-25 23:16:50 +01:00
2ea0590b03 i18n: return 'key' if 'key' is not in locales files 2021-11-25 19:46:34 +01:00
80a513baa5 Use new techniques to get (dis)likes back 2021-11-24 01:22:09 +01:00
ba48f68fc3 allow multiple, successive content-encodings 2021-11-21 18:16:05 +01:00
319587e2f1 extract_video_info: make sure that the Android player response is valid 2021-11-21 17:34:17 +01:00
bf7952d9c7 i18n: log a warning instead of rising an exception
This is more user-friendly.
TODO: maybe make a compile time flag for testing purposes
2021-11-21 01:54:54 +01:00
f29ab53aff Add other missing translations
* on watch page and video cards (search results, playlists, etc...)
* on /feed/playlists
* in search filters (not normalized in order to avoid collisions with
an existing PR that reworks the search filters)
2021-11-21 01:54:46 +01:00
b5b0c58de7 Add missing translation for quality selectors 2021-11-21 01:50:11 +01:00
a1bb421eec Remove useless 'hl' parameters on captions URL 2021-11-21 01:50:11 +01:00
139786b9ef i18n: pass only the ISO code string to 'translate()'
Don't use the whole Hash everywhere.
Also fall back nicely to english string if no translation exists.
2021-11-21 01:50:11 +01:00
301444563b i18n: Use language full name instead of ISO code
Fixes #851
2021-11-21 01:50:11 +01:00
9966c21c6b i18n: Add list of language names 2021-11-21 01:50:11 +01:00
fd54cf2d05 Escape video description 2021-11-17 12:04:30 +00:00
2c447a42f2 Make sure to only apply fix if QUIC is disabled 2021-11-16 21:40:35 +01:00