3 Commits

Include renames

Author	SHA1	Message	Date
Josh HawkinsandGitHub	cfa08c56b2	Normalize request paths in media auth (#24662) ... * merge repeated slashes in the media auth path check X-Original-URL carries only the raw request path since #24602, and extract_path parsed it with urlparse, which reads a path starting with // as a host. A restricted role could request another camera's clips or recordings with a leading // and the media check saw a non-media path and allowed it, while nginx merged the slashes and served the file. extract_path now splits the raw URI the same way the go2rtc stream check does and merges repeated slashes as nginx does before matching locations. The split helper moves from auth.py into media_auth.py so both checks share it. * check the nginx-normalized path in the media auth dot-segment fallback The dot-segment fallback only checked the raw first segment, so a role restricted to one camera could request `/x/../clips/back_door-1.jpg` and nginx served back_door's clip. The fallback now resolves the path the way nginx does before checking for a media root, and the URI split ends at a literal `#` since nginx ignores everything after it.	2026-10-15 07:02:08 -05:00
Nicolas MowenandGitHub	4ee12e6237	Increase ruff coverage (#23644) ... * Pin ruff * Add python upgrade fixes This enables python upgrade checks in ruff to look for deprecated types and patterns. This namely fixes: - usage of deprecated `Typing` which is now built in - some specific exceptions which are caught and have new aliases Some specific UP checks were also ignored as they are stylistic / unimportant and likely to cause bugs * Remove async blocking calls Use asyncio.to_thread on two remaining blocking calls to fix hanging event thread loop. Enable this specific rule to block it in the future. * Use proper logging mechanism * Correctly format logs * Raise with context When raising an exception include the from context to improve debugging * Cleanup	2026-07-06 12:28:02 -05:00
Nicolas MowenandGitHub	c67170aa20	Implement cross-camera safety for indexed media folders (#23164) ... * Implement cross-camera safety for indexed media folders * Cleanup * Improve robustness	2026-05-11 14:52:18 -05:00