audiobookshelf/server/controllers
Lars Kiesow 4a125276b3
Restrict Library Paths
This patch introduces the new environment variable `MEDIA_BASE_PATH`
allowing to restrict the media paths that can be added to libraries and
therefore limiting which sections of the filesystem audiobookshelf will
scan and potentially serve to the web.

This means, you can, for example, specify that all media are in
`/audiobooks`, preventing users to access file system paths not starting
with this.

This also prevents things like users specifying `/` as a library path
which seems to be a good way for a denial of service attack right now.

The patch also adds the new environment variable to the example Docker
commands and docker-compose files, matching the media file specified in
those examples.
2023-01-16 22:15:07 +01:00
..
AuthorController.js Fix:Manually updating author image path & realtime update author image #1317 2022-12-26 15:45:42 -06:00
BackupController.js Update:Backups API endpoints, add get all backups route, update socket init event payload 2022-11-24 13:14:29 -06:00
CacheController.js Update:Encode & embed metadata API endpoints, separate cache & search endpoints into controllers 2022-11-19 13:28:06 -06:00
CollectionController.js Remove invalid RSS feeds on init and remove feeds when associated entity is removed 2022-12-31 14:08:34 -06:00
EBookController.js Start of new epub reader 2023-01-01 18:09:00 -06:00
FileSystemController.js Update FileSystemController.js to respond with objects 2022-11-29 11:55:22 -06:00
LibraryController.js Restrict Library Paths 2023-01-16 22:15:07 +01:00
LibraryItemController.js Add:RSS feed for series & cleanup empty series from db #1265 2022-12-31 16:58:19 -06:00
MeController.js Comments where user settings needs to be removed 2022-12-17 14:52:10 -06:00
MiscController.js Update:Remove RSS feeds from login response payload and include feeds from library items request 2022-12-31 10:59:12 -06:00
NotificationController.js Update:Notifications onTest for testing and parse title/body template #996 2022-09-24 16:15:16 -05:00
PlaylistController.js Add:Create playlist from a collection #1226 2022-12-17 17:31:19 -06:00
PodcastController.js Fix:Check if Windows before cleaning file path for POSIX separators #1254 2023-01-05 17:45:27 -06:00
RSSFeedController.js Add:RSS feed for series & cleanup empty series from db #1265 2022-12-31 16:58:19 -06:00
SearchController.js Add MusicBrainz provider 2023-01-07 13:05:33 -06:00
SeriesController.js Add:RSS feed for series & cleanup empty series from db #1265 2022-12-31 16:58:19 -06:00
SessionController.js Add:Delete playback session button and api route 2022-08-13 12:24:19 -05:00
ToolsController.js Add:Option to disable backup of audio files in embed metadata tool #1370 2023-01-07 15:16:52 -06:00
UserController.js Server socket event fixes 2022-12-22 16:26:11 -06:00