audiobookshelf/server
Lars Kiesow 4a125276b3
Restrict Library Paths
This patch introduces the new environment variable `MEDIA_BASE_PATH`
allowing to restrict the media paths that can be added to libraries and
therefore limiting which sections of the filesystem audiobookshelf will
scan and potentially serve to the web.

This means, you can, for example, specify that all media are in
`/audiobooks`, preventing users to access file system paths not starting
with this.

This also prevents things like users specifying `/` as a library path
which seems to be a good way for a denial of service attack right now.

The patch also adds the new environment variable to the example Docker
commands and docker-compose files, matching the media file specified in
those examples.
2023-01-16 22:15:07 +01:00
..
controllers Restrict Library Paths 2023-01-16 22:15:07 +01:00
finders Add MusicBrainz provider 2023-01-07 13:05:33 -06:00
libs Start of new epub reader 2023-01-01 18:09:00 -06:00
managers Fix:Close open playback session on server when local playback session syncing from mobile 2023-01-15 15:00:18 -06:00
objects Fix:Close open playback session on server when local playback session syncing from mobile 2023-01-15 15:00:18 -06:00
providers Update:Handle badly formatted series sequence from Audible #1339 2023-01-07 16:33:20 -06:00
routers Add MusicBrainz provider 2023-01-07 13:05:33 -06:00
scanner Fix:Check if Windows before cleaning file path for POSIX separators #1254 2023-01-05 17:45:27 -06:00
utils Don't list book twice in continue series 2023-01-13 00:50:04 +01:00
Auth.js Update:Remove RSS feeds from login response payload and include feeds from library items request 2022-12-31 10:59:12 -06:00
Db.js Silence remove invalid sessions debug log 2023-01-08 09:15:11 -06:00
Logger.js Fix:Check if Windows before cleaning file path for POSIX separators #1254 2023-01-05 17:45:27 -06:00
Server.js Restrict Library Paths 2023-01-16 22:15:07 +01:00
SocketAuthority.js Update:Only emit library socket events to users with access to lib 2022-11-30 17:32:59 -06:00
Watcher.js Fix:Check if Windows before cleaning file path for POSIX separators #1254 2023-01-05 17:45:27 -06:00