Skip to content

Dashboard Rewrite PR #144

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
wants to merge 25 commits into
base: main
Choose a base branch
from
Draft

Dashboard Rewrite PR #144

wants to merge 25 commits into from

Conversation

ShadowLp174
Copy link
Member

PR draft for dashboard rewrite commits

@ShadowLp174 ShadowLp174 added this to the Web Dashboard milestone Nov 15, 2023
@ShadowLp174 ShadowLp174 self-assigned this Nov 15, 2023
@ShadowLp174 ShadowLp174 linked an issue Nov 15, 2023 that may be closed by this pull request

#isValidUrl(str) {
var pattern = new RegExp('^(https?:\\/\\/)?'+ // protocol
'((([a-z\\d]([a-z\\d-]*[a-z\\d])*)\\.)+[a-z]{2,}|'+ // domain name

Check failure

Code scanning / CodeQL

Inefficient regular expression

This part of the regular expression may cause exponential backtracking on strings starting with '0' and containing many repetitions of '0'.
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Will fix later, probably

added removing of songs, rearranging, "shifting", current song metadata

All queue features implemented
app.use(express.json());
app.use(express.urlencoded());
app.use(express.static(path.join(__dirname, "/static")));
app.use(cookieParser());

Check failure

Code scanning / CodeQL

Missing CSRF middleware

This cookie middleware is serving a [request handler](1) without CSRF protection. This cookie middleware is serving a [request handler](2) without CSRF protection.
Comment on lines +52 to +57
const ses = session({
secret: remix.config.sessionSecret || this.guid(),
resave: false,
secure: !!remix.config.ssl.useSSL,
saveUninitialized: false
}));
});

Check warning

Code scanning / CodeQL

Clear text transmission of sensitive cookie

Sensitive cookie sent without enforcing SSL encryption.
- prominent thumbnail image colour picker interface done
- interface for channel display
- current song display now connected to updates from the websocket
- queue syncing on load and join
- playback status syncing
- other improvements
initiated text channel selection (not fully done yet)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Dashboard Rewrite
1 participant