Max

Collection of potential security issues in Jellyfin

59

# Collection of *potential* security issues in Jellyfin This is a non exhaustive list of *potential* security issues found in Jellyfin. Some of these might cause controversy. Some of these...

* Reorder some functions for better reading flow * Generalize for_file: Allow any type that implements a new interface "UploadData". Add a new internal function for_generic that uses UploadData-types. for_file...

OIDC login redirect URL does not respect baseURL, breaks OIDC login flow

1

**Description** Attempting to configure OIDC login with Filebrowser Quantum. Filebrowser runs at a subpath `/filebrowser` on the domain. So all filebrowser paths are accessible at `https://example.com/filebrowser/`. To configure this, ```...

#[files] produces incorrect test names on Windows

8

### Steps to reproduce 1. `cargo new reproducer && cd reproducer && cargo add --dev rstest` 2. `main.rs` ``` fn main() { println!("Hello, world!"); } #[cfg(test)] mod test { use...

RFC 8657 adds two extensions to issue and issuewild CAA records: validationmethods and accounturi. The former dictates the challenge methods that may be used. The CAA checker should verify that...