Commit Graph

2268 Commits

Author SHA1 Message Date
Stein Magnus Jodal
c720d90b53 docs: v2.2.1 release notes 2018-10-15 22:08:07 +02:00
Nick Steel
10fafc0228 http: Add config option to control CSRF protection (Fixes: #1713)
Allows users to disable CSRF protection and revert to the HTTP server's
previous (less secure) behaviour. Users are advised to leave this config
value enabled if possible. However, if disabled this will:
  * Remove the requirement to set a ``Content-Type: application/json``
    header for JSON-RPC POST requests.
  * Disable all same-origin checks, effectively ignoring the ``allowed_origins``
    config since requests from any origin will be allowed.
  * Suppress all ``Access-Control-Allow-*`` response headers.
2018-10-15 17:24:45 +01:00
Nick Steel
6e9ed9e8a9 http: allow local files to access websocket (Fixes #1711)
check_origin() still ensures the Origin header is set but now only blocks
when missing from the allowed list *if* a network location was extracted
from the header. This prevents websocket connections originating from
local files (common in Apache Cordova apps such as Mopidy-Mobile) from
being blocked; these files don't really have a sensible value for Origin
so the client browser sets the header to something like 'file://' or
'null'.

Also added some tests for check_origin().
2018-10-08 23:39:47 +01:00
Stein Magnus Jodal
b62c153425 docs: v2.2.0 release notes 2018-09-30 00:09:48 +02:00
Stein Magnus Jodal
58e75b2b7a m3u: Ignore paths outside the playlist_dir
Fixes #1659
2018-09-19 22:27:18 +02:00
Stein Magnus Jodal
23e73d962b core: Define playlists.delete() return type 2018-09-19 22:27:18 +02:00
Stein Magnus Jodal
a61cdf4823 Merge branch 'release-2.1' into develop 2018-09-19 22:26:36 +02:00
Stein Magnus Jodal
2fb7885c56 Merge branch 'master' into release-2.1 2018-09-19 22:25:58 +02:00
Stein Magnus Jodal
faea0c638c docs: Avoid Sphinx 1.8.0, which fails on Python 2.7
See https://github.com/sphinx-doc/sphinx/issues/5417
2018-09-19 21:37:17 +02:00
Stein Magnus Jodal
f267e8db20 Merge branch 'release-2.1' into develop 2018-06-05 22:18:08 +02:00
Stein Magnus Jodal
e9f5c6cb06 Merge branch 'master' into release-2.1 2018-06-05 22:17:39 +02:00
Stein Magnus Jodal
99f6ae2a5c docs: Remove Mopidy-Notifier extension
Upstream seems to have disappeared.
2018-06-04 02:32:11 +02:00
Mark Greenwood
b01f3f5486 Update URL and image in docs for RompR MPD client 2018-06-04 02:31:25 +02:00
Damien Cassou
029ed5f0b0 docs: Add MPDel client 2018-06-04 02:31:10 +02:00
Stein Magnus Jodal
69ef2ef9ba docs: MPRIS playlists interface is implemented 2018-06-04 02:30:52 +02:00
Stein Magnus Jodal
b3d9d7106e docs: Fix testing example 2018-06-04 02:30:41 +02:00
Nick Steel
65014ad475
Merge pull request #1677 from fatg3erman/develop
docs: Update URL and image in docs for RompR MPD client
2018-05-14 15:59:17 +01:00
Mark Greenwood
5a81399a53 Update URL and image in docs for RompR MPD client 2018-05-14 15:17:50 +01:00
Damien Cassou
dea72384ae
docs: Add MPDel client 2018-05-08 12:58:39 +02:00
Stein Magnus Jodal
9f69805fa7 docs: Tweak changelog 2018-04-19 20:54:18 +02:00
Stein Magnus Jodal
2cb7993316
Merge pull request #1621 from kingosticks/fix/mpd-load-tracklist-metadata
Lookup track metadata for MPD load and listplaylistinfo
2018-04-19 20:53:24 +02:00
Nick Steel
ba708001f4 docs: updates to the Raspberry Pi install guide. 2018-04-16 23:25:54 +01:00
Nick Steel
e87599a2d3 Explicitly check for None (core playlists API future proofing). 2018-04-15 21:21:59 +01:00
Stein Magnus Jodal
267d705978 docs: Tweak changelog 2018-04-15 22:19:30 +02:00
Nick Steel
ae4dab65e4 docs: added changelog entry 2018-04-15 17:46:46 +01:00
Nick Steel
1d6e081171 docs: mention that same-origin requests are always allowed. 2018-04-15 17:26:16 +01:00
Nick Steel
51741a7cbc HTTP: Apply allowed_origins to Websocket requests also. 2018-04-15 17:14:13 +01:00
Nick Steel
7caba4a05d docs: improved http/allowed_origins description. 2018-04-15 17:12:16 +01:00
Nick Steel
ecb5a7038a docs: http/allowed_origins config setting description 2018-04-15 17:12:16 +01:00
Stein Magnus Jodal
84aafaadcb docs: MPRIS playlists interface is implemented 2018-04-08 21:08:12 +02:00
Stein Magnus Jodal
fa70c1e527 docs: Fix testing example 2018-04-08 21:06:08 +02:00
Stein Magnus Jodal
e6c89f3b6a docs: Tweak changelog 2018-04-06 22:11:47 +02:00
matt LLVW
2e6c0049a4 config: remove 10000 tracks limitation in playlists 2018-04-04 19:20:17 +02:00
Stein Magnus Jodal
4581451973 docs: Update changelog 2018-03-30 11:59:46 +02:00
Stein Magnus Jodal
e215484c75 encoding: Never crash if unknown bytes in OS errors
Fixes #1599
2018-03-30 11:25:31 +02:00
Stein Magnus Jodal
cd2bbaba07 docs: Add PR#1611 to changelog 2018-03-30 10:44:08 +02:00
Stein Magnus Jodal
95577206a0 Require tornado >= 4.4 2018-03-29 20:51:01 +02:00
Stein Magnus Jodal
f46c290ec1 Merge branch 'release-2.1' into develop 2018-03-29 16:30:17 +02:00
Stein Magnus Jodal
7d02870f79 Merge branch 'master' into release-2.1 2018-03-29 16:25:41 +02:00
Stein Magnus Jodal
caa60f33f5 Update copyright year 2018-03-29 10:01:03 +02:00
Stein Magnus Jodal
b0c9117ed7 Merge branch 'master' into release-2.1 2018-03-29 09:59:22 +02:00
Stein Magnus Jodal
b25abf114a docs: Fix whitespace 2018-03-29 09:58:37 +02:00
Jarryd Tilbrook
b4c98ec4a5 Fix/1531 add unix domain socket (#1629)
mpd: add functionality for unix domain socket (Fixes #1531)

The Hostname config type now supports a Unix socket path prefixed with `unix:`
2018-02-13 12:58:39 +00:00
Jonathan Jefferies
26577eea2d
Remove Deezer backend
The Deezer extension has been removed from Github at Deezer's request, so is no longer available.

https://github/dmca/blob/master/2018/2018-01-12-Deezer.md
2018-01-24 22:06:02 +00:00
Dan Brough
1a94183f00 docs: Add Mopidy-RNZ backend (#1649) 2017-12-19 23:51:29 +01:00
Stein Magnus Jodal
b2d32f0702 Merge branch 'release-2.1' into develop 2017-10-27 22:58:37 +02:00
Stein Magnus Jodal
24ffc07164 Merge branch 'master' into release-2.1 2017-10-27 22:58:26 +02:00
Stein Magnus Jodal
a25972a71f docs: Update sponsors 2017-10-27 22:58:17 +02:00
Stein Magnus Jodal
7c3229c6c7 Merge branch 'release-2.1' into develop 2017-10-27 22:54:25 +02:00
Stein Magnus Jodal
cf5e41ef4f Merge branch 'master' into release-2.1 2017-10-27 22:53:58 +02:00