Šarūnas Nejus 75f0d8f489 Fix XSS by using escaped template tags in web UI ...

Replace all `<%= %>` (unescaped) with `<%- %>` (escaped) in Underscore.js
templates to prevent cross-site scripting via music metadata fields.

2026-04-19 19:58:37 +01:00

..

_utils

Refactor parsing label info

2026-04-18 17:31:49 +01:00

bpd

Migrate composer -> composers

2026-04-05 09:15:23 +01:00

discogs

Fetch remixers, composers, arrangers and lyricists from Discogs

2026-04-16 09:02:07 +01:00

lastgenre

lastgenre: Fix artist_for_filter fallback handling

2026-04-16 16:27:48 +02:00

metasync

Address RUF012

2026-01-13 20:55:40 +00:00

web

Fix XSS by using escaped template tags in web UI

2026-04-19 19:58:37 +01:00

_typing.py

Fix genius end to end lyrics test

2026-03-06 10:57:08 +00:00

absubmit.py

Do not use backslashes to deal with long strings

2025-08-30 23:10:20 +01:00

acousticbrainz.py

Address RUF012

2026-01-13 20:55:40 +00:00

advancedrewrite.py

Handle list fields in rewrite

2026-04-10 10:43:25 +01:00

albumtypes.py

Configure future-annotations

2026-01-13 20:55:40 +00:00

aura.py

Migrate composer -> composers

2026-04-05 09:15:23 +01:00

autobpm.py

autobpm: Options force,quite and deprecate overwrite

2026-04-03 11:28:33 +02:00

badfiles.py

Fix references to color utils

2026-03-14 11:57:18 +00:00

bareasc.py

Do not assign args to query

2025-07-08 11:37:34 +01:00

beatport.py

Use va_name config for all artist fields on VA releases

2026-03-12 23:00:32 -04:00

bench.py

autotag: use explicit imports

2026-03-28 12:26:27 +00:00

bpm.py

Do not use explicit indices for logging args when not needed

2025-08-30 23:10:21 +01:00

bpsync.py

Ensure we use Distance to initialise Match objects

2026-03-22 19:23:53 +00:00

bucket.py

Replace string concatenation (' + ')

2025-08-30 23:10:15 +01:00

chroma.py

chroma: address review feedback

2026-04-15 00:03:23 +01:00

convert.py

convert: generate playlist entries from effective output paths

2026-03-04 15:38:33 +00:00

deezer.py

Ensure artist IDs are strings in deezer

2026-04-07 09:41:39 +01:00

duplicates.py

Delegate attribute access to logging

2025-08-30 23:10:21 +01:00

edit.py

Handle DelimitedString fields as native lists in edit plugin

2026-02-23 00:33:24 +00:00

embedart.py

Clear art on import

2025-11-10 22:38:37 +01:00

embyupdate.py

Replace logging f-strings with arguments

2025-08-30 23:10:21 +01:00

export.py

Enable RUF rules

2026-01-13 20:55:40 +00:00

fetchart.py

Fixed minor typing issue as requests is now more strictly typed.

2026-04-11 11:18:43 +01:00

filefilter.py

Reformat the codebase

2024-09-21 11:57:48 +01:00

fish.py

try to fix fish plugin

2026-03-08 13:57:42 +01:00

freedesktop.py

Reformat the codebase

2024-09-21 11:57:48 +01:00

fromfilename.py

Enable RUF rules

2026-01-13 20:55:40 +00:00

ftintitle.py

Remove dead code identified by static analysis

2026-03-30 14:09:44 +08:00

fuzzy.py

Force slow queries for FuzzyPlugin

2026-03-03 14:05:35 +00:00

hook.py

Delegate attribute access to logging

2025-08-30 23:10:21 +01:00

ihate.py

Do not use explicit indices for logging args when not needed

2025-08-30 23:10:21 +01:00

importadded.py

Delegate attribute access to logging

2025-08-30 23:10:21 +01:00

importfeeds.py

Do not use explicit indices for logging args when not needed

2025-08-30 23:10:21 +01:00

importsource.py

Fix references to color utils

2026-03-14 11:57:18 +00:00

info.py

Do not use explicit indices for logging args when not needed

2025-08-30 23:10:21 +01:00

inline.py

inline: make the album/item available directly

2026-04-15 11:59:19 -07:00

ipfs.py

Add ability to set temporary music dir context for ipfs

2026-04-11 13:02:42 +01:00

keyfinder.py

Enable RUF rules

2026-01-13 20:55:40 +00:00

kodiupdate.py

Do not use explicit indices for logging args when not needed

2025-08-30 23:10:21 +01:00

lastimport.py

Update listenbrainz accordingly

2026-03-31 01:36:08 +01:00

limit.py

Do not assign args to query

2025-07-08 11:37:34 +01:00

listenbrainz.py

Normalize dashes to underscores in musicbrainz data fields

2026-04-12 16:21:30 +01:00

loadext.py

Use only plugins/disabled_plugins config in plugin loading

2025-08-09 15:11:58 +01:00

lyrics.py

lyrics: add keep_synced option to not overwrite synced lyrics

2026-04-17 09:19:15 +01:00

mbcollection.py

Normalize dashes to underscores in musicbrainz data fields

2026-04-12 16:21:30 +01:00

mbpseudo.py

Fix typing issues

2026-04-12 16:21:30 +01:00

mbsubmit.py

autotag: use explicit imports

2026-03-28 12:26:27 +00:00

mbsync.py

Ensure we use Distance to initialise Match objects

2026-03-22 19:23:53 +00:00

missing.py

Address comments

2026-03-16 06:52:35 +00:00

mpdstats.py

Address RUF012

2026-01-13 20:55:40 +00:00

mpdupdate.py

Delegate attribute access to logging

2025-08-30 23:10:21 +01:00

musicbrainz.py

Update docstring

2026-04-19 12:20:25 +02:00

parentwork.py

Type musicbrainz fully

2026-04-12 16:21:30 +01:00

permissions.py

Apply formatting

2024-03-01 15:21:25 +10:00

play.py

feat(play): Add -R/--randomize option to play plugin

2026-03-16 20:33:23 +02:00

playlist.py

Adapt code to fully typed confuse library

2026-02-16 12:45:05 +00:00

plexupdate.py

Replace string concatenation (' + ')

2025-08-30 23:10:15 +01:00

random.py

Fix grouping for list fields and stabilize equal-chance order

2026-01-30 00:30:46 +00:00

replace.py

Configure future-annotations

2026-01-13 20:55:40 +00:00

replaygain.py

Store paths relative to music dir in DB, expand on read

2026-04-11 13:01:41 +01:00

rewrite.py

Apply all matching rules to a field

2026-04-10 14:54:57 +01:00

scrub.py

Delegate attribute access to logging

2025-08-30 23:10:21 +01:00

smartplaylist.py

smartplaylist: Display available lists cp-ready

2026-04-04 13:35:22 +01:00

sonosupdate.py

Apply formatting tools to all files

2023-10-22 09:53:18 +10:00

spotify.py

Make get_search_query_with_filters abstract

2026-03-08 09:06:00 +00:00

subsonicplaylist.py

Replace string concatenation (' + ')

2025-08-30 23:10:15 +01:00

subsonicupdate.py

Delegate attribute access to logging

2025-08-30 23:10:21 +01:00

substitute.py

Apply substitute rules in sequence

2024-10-16 16:36:36 +02:00

the.py

Address RUF012

2026-01-13 20:55:40 +00:00

thumbnails.py

Delegate attribute access to logging

2025-08-30 23:10:21 +01:00

titlecase.py

Adapt code to fully typed confuse library

2026-02-16 12:45:05 +00:00

types.py

Replace format calls with f-strings

2025-08-30 18:42:26 +01:00

unimported.py

Replace string concatenation (' + ')

2025-08-30 23:10:15 +01:00

zero.py

feat: zero plugin zeroes disctotal if single disc

2026-02-14 18:32:04 +01:00