Tobias GesellchenandClaude Sonnet 5 aae1673451 fix(service): trim whitespace from TuneIn path/query params ...

Guards against whitespace-only stationID/podcastID/encodedName path
segments and tightens the existing empty-string checks on the search
q/cursor query params. Spotted while reviewing stalkerquatre-oss's
fork diff for TuneIn handling improvements; their s0/Radio fallback
defaults were skipped as unprecedented invented values that would
mask malformed requests instead of erroring.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-08-09 19:47:49 +02:00

..

amazon

sec8: refactor zeroconf API to (host, port string) to close request-forgery alerts

2026-05-25 13:14:56 +02:00

bmx

fix(web): play Radio Browser via native RADIO_BROWSER source (refs #479)

2026-06-08 20:44:31 +02:00

certmanager

sec4: fix unhandled writable file close; ignore CODE-SCANNING-NOTES.md

2026-05-24 15:52:35 +02:00

constants

refactor(speaker): introduce pkg/speaker leaf for shared protocol constants

2026-05-11 23:18:08 +02:00

datastore

feat(announcements): support a proper link, not a raw URL in the message text

2026-08-09 10:18:19 +02:00

ding

fix(health): skip fetchHealth re-render for non-resolving quick fixes

2026-05-27 21:20:58 +02:00

export

feat(export): encrypted diagnostic report for issue reporting

2026-05-21 20:02:57 +02:00

handlers

fix(service): trim whitespace from TuneIn path/query params

2026-08-09 19:47:49 +02:00

health

feat(health): add admin_area_auth_available check

2026-08-08 23:49:57 +02:00

logbuf

feat(service): add Logs tab streaming the live stderr trace

2026-05-19 20:12:25 +02:00

marge

refactor(handlers): resolve client IP via a clientHost helper

2026-06-28 13:15:49 +02:00

proxy

sec8: move lgtm annotation above log.Printf to suppress CodeQL alert #294

2026-05-25 20:06:36 +02:00

setup

fix(cli): bump default enable-ssh --full-config command delay to 5s

2026-08-09 11:55:54 +02:00

soundtouchweb

feat(announcements): support a proper link, not a raw URL in the message text

2026-08-09 10:18:19 +02:00

spotify

sec8: refactor zeroconf API to (host, port string) to close request-forgery alerts

2026-05-25 13:14:56 +02:00

stations

fix(web): play Radio Browser via native RADIO_BROWSER source (refs #479)

2026-06-08 20:44:31 +02:00

stockholm

fix(lint): sec6/sec7 post-pass — static.go Close + remove unused sanitizeErr

2026-05-25 11:28:26 +02:00

testing/fakespeaker

fixup: refine CodeQL XSS autofix (fakespeaker round-trip + lint)

2026-06-14 21:36:01 +02:00

tts

fix(tts): play via LOCAL_INTERNET_RADIO; accept app_key at /v1/auth

2026-05-31 22:35:31 +02:00

updatecheck

feat(announcements): support a proper link, not a raw URL in the message text

2026-08-09 10:18:19 +02:00

zeroconf

sec8: validate zeroconf port to break CodeQL taint chain (alerts 134/135/136)

2026-05-25 21:17:57 +02:00