Skip to content

Conversation

@ShadowLp174
Copy link
Member

PR draft for dashboard rewrite commits

@ShadowLp174 ShadowLp174 added this to the Web Dashboard milestone Nov 15, 2023
@ShadowLp174 ShadowLp174 self-assigned this Nov 15, 2023
@ShadowLp174 ShadowLp174 linked an issue Nov 15, 2023 that may be closed by this pull request

#isValidUrl(str) {
var pattern = new RegExp('^(https?:\\/\\/)?'+ // protocol
'((([a-z\\d]([a-z\\d-]*[a-z\\d])*)\\.)+[a-z]{2,}|'+ // domain name

Check failure

Code scanning / CodeQL

Inefficient regular expression

This part of the regular expression may cause exponential backtracking on strings starting with '0' and containing many repetitions of '0'.
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Will fix later, probably

added removing of songs, rearranging, "shifting", current song metadata

All queue features implemented
app.use(express.json());
app.use(express.urlencoded());
app.use(express.static(path.join(__dirname, "/static")));
app.use(cookieParser());

Check failure

Code scanning / CodeQL

Missing CSRF middleware

This cookie middleware is serving a [request handler](1) without CSRF protection. This cookie middleware is serving a [request handler](2) without CSRF protection.
Comment on lines +52 to +57
const ses = session({
secret: remix.config.sessionSecret || this.guid(),
resave: false,
secure: !!remix.config.ssl.useSSL,
saveUninitialized: false
}));
});

Check warning

Code scanning / CodeQL

Clear text transmission of sensitive cookie

Sensitive cookie sent without enforcing SSL encryption.
- prominent thumbnail image colour picker interface done
- interface for channel display
- current song display now connected to updates from the websocket
- queue syncing on load and join
- playback status syncing
- other improvements
initiated text channel selection (not fully done yet)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Dashboard Rewrite

2 participants