7 Commits

Include renames

Author	SHA1	Message	Date
timothyandClaude Opus 4.8	cf834d8b60	security(#283): sniff artwork content type from bytes, remove serve-side ?contentType= reflection ... S4 stored-XSS + S9 upload-size DoS from the #197 cold API review. The artwork path trusted client-supplied content types at both ends: upload validated only the declared multipart Content-Type (never decoded the bytes), and serving reflected a client `?contentType=` straight into the response Content-Type on unauthenticated GET sinks (/iptv/logos, /artwork/watermarks). Chain: upload <script> bytes as image/png -> GET ...?contentType=text/html serves them as HTML in-origin. nosniff (#279) does not help because the server explicitly declares text/html. - Upload: derive the content type from the bytes via SkiaSharp SKCodec (header-only, no decode -> no decompression-bomb path); reject non-images 422. New ErsatzTV.Core/Images/ImageContentTypes as the single allow-list source. Dropped the untrusted declared Content-Type from the UploadArtwork command. - Serve: removed the ?contentType= reflection structurally -- dropped ContentType from GetCachedImagePath and the [FromQuery] binding on GetImage/GetWatermark; the handler always sniffs the file, defaulting application/octet-stream. ArtworkContentTypeModel.UrlWithContentType is now the bare path; SPA previews no longer append the query. - Defense-in-depth: channel-logo / watermark {path, contentType} DTOs run through ArtworkContentTypeModel.Sanitized(), blanking non-allow-listed types on write. - S9: Kestrel MaxRequestBodySize from ETV_MAXIMUM_UPLOAD_MB rejects oversized bodies during read (controller file.Length check kept as friendly-error backstop). Both serve sinks are IgnoreApi, so no OpenAPI change. Tests: byte-sniff accept/ reject, Sanitized() allow-list, Location no longer carries ?contentType=. Docs: api-conventions §4a + decisions.md 2026-07-12. Refs #283 #197 #66 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-12 00:07:55 +02:00
Jason DoveandGitHub	7e30444857	dependencies and code cleanup (#2117) ... * fix validation in new form layout * pin mediatr to last oss version * update dependencies * cleanup code in core * cleanup code in ffmpeg * cleanup code in infra * cleanup code in scanner * cleanup code in application * cleanup main code * cleanup test code * solution-wide code cleanup	2025-07-06 15:56:17 +00:00
Jason DoveandGitHub	f6249d9fa4	channel logo and watermark fixes (#2100) ... * channel logo and watermark fixes * update changelog	2025-07-01 13:40:30 +00:00
Jason DoveandGitHub	087901d177	adjust block unique constraint (#1634) ... * upgrade dependencies * allow blocks with same name in different groups * code cleanup	2024-03-05 10:39:06 -06:00
Jason DoveandGitHub	c02b83d0d6	code cleanup (#743) ... * update tools * run code cleanup * update dependencies	2022-04-19 17:47:18 -05:00
Jason DoveandGitHub	1ab98578ab	refactor namespaces and imports (#670) ... * re-namespace * optimize usings * more usings * more of the same * more implicit/global usings * cleanup all usings * minor fixes	2022-03-03 15:36:07 -06:00
Jason DoveandGitHub	6504ca10a8	cache local artwork on disk (#217)	2021-05-26 19:49:08 -05:00