Tobias Gesellchenandlnx01 557e92682f Potential fix for pull request finding 'CodeQL / Reflected cross-site scripting' ...

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

2026-06-14 21:36:01 +02:00

..

amazon

sec8: refactor zeroconf API to (host, port string) to close request-forgery alerts

2026-05-25 13:14:56 +02:00

bmx

fix(web): play Radio Browser via native RADIO_BROWSER source (refs #479)

2026-06-08 20:44:31 +02:00

certmanager

sec4: fix unhandled writable file close; ignore CODE-SCANNING-NOTES.md

2026-05-24 15:52:35 +02:00

constants

refactor(speaker): introduce pkg/speaker leaf for shared protocol constants

2026-05-11 23:18:08 +02:00

datastore

fix(datastore): dedup recents by ID in SaveRecents (stop same-recent pile-up)

2026-06-14 21:02:24 +02:00

ding

fix(health): skip fetchHealth re-render for non-resolving quick fixes

2026-05-27 21:20:58 +02:00

export

feat(export): encrypted diagnostic report for issue reporting

2026-05-21 20:02:57 +02:00

handlers

fix(health): set_clock verifies the change and falls back to SSH (refs #345)

2026-06-07 19:07:21 +02:00

health

refactor(health): probe /api/setup/version in the server-URL reachability check (refs #451)

2026-06-06 20:57:54 +02:00

logbuf

feat(service): add Logs tab streaming the live stderr trace

2026-05-19 20:12:25 +02:00

marge

Potential fix for pull request finding 'CodeQL / Reflected cross-site scripting'

2026-06-14 21:36:01 +02:00

proxy

sec8: move lgtm annotation above log.Printf to suppress CodeQL alert #294

2026-05-25 20:06:36 +02:00

setup

feat(cli/setup): friendlier enable-ssh timeout + re-sync boseurls after XML migration (refs #471)

2026-06-08 21:36:21 +02:00

soundtouchweb

feat(player,cli): nudge sources refresh after adding a media server

2026-06-11 20:56:04 +02:00

spotify

sec8: refactor zeroconf API to (host, port string) to close request-forgery alerts

2026-05-25 13:14:56 +02:00

stations

fix(web): play Radio Browser via native RADIO_BROWSER source (refs #479)

2026-06-08 20:44:31 +02:00

stockholm

fix(lint): sec6/sec7 post-pass — static.go Close + remove unused sanitizeErr

2026-05-25 11:28:26 +02:00

testing/fakespeaker

Potential fix for pull request finding 'CodeQL / Reflected cross-site scripting'

2026-06-14 21:36:01 +02:00

tts

fix(tts): play via LOCAL_INTERNET_RADIO; accept app_key at /v1/auth

2026-05-31 22:35:31 +02:00

zeroconf

sec8: validate zeroconf port to break CodeQL taint chain (alerts 134/135/136)

2026-05-25 21:17:57 +02:00