frigate

6,098 Commits 39 Branches 163 Tags

5 Commits

Include renames

Author	SHA1	Message	Date
Josh HawkinsandGitHub	11f8786459	sanitize user-supplied path components (#23990 ) CI / AMD64 Build (push) Canceled after 0s Details CI / ARM Build (push) Canceled after 0s Details CI / Jetson Jetpack 6 (push) Canceled after 0s Details CI / AMD64 Extra Build (push) Canceled after 0s Details CI / ARM Extra Build (push) Canceled after 0s Details CI / Synaptics Build (push) Canceled after 0s Details CI / Assemble and push default build (push) Canceled after 0s Details sanitize_filename leaves ".." intact and collapses variants like "..:" and "..*" to "..", so filesystem paths built from face names, classification model/category names, image ids, and trigger data could escape their base directory. Route every such site through new frigate/util/path.py helpers (safe_join, sanitize_path_component, sanitize_contained_path), which reject traversal and verify containment. Worst case was DELETE /classification/{name}, which rmtree'd /media/frigate and /config while returning 200. Important to note that all affected endpoints already require admin permission, so this sould be considered hardening rather than fixing exploitable code.	2026-08-13 21:59:46 -05:00
Nicolas MowenandGitHub	b751228476	Various Tweaks (#20800 ) CI / AMD64 Build (push) Waiting to run Details CI / ARM Build (push) Waiting to run Details CI / Jetson Jetpack 6 (push) Waiting to run Details CI / AMD64 Extra Build (push) Blocked by required conditions Details CI / Synaptics Build (push) Blocked by required conditions Details CI / Assemble and push default build (push) Blocked by required conditions Details CI / ARM Extra Build (push) Blocked by required conditions Details * Fix incorrectly picking start time when date was selected * Implement shared file locking utility * Cleanup	2025-11-04 17:06:14 -06:00
Josh HawkinsandGitHub	b05ac7430a	Change clean snapshots from png to webp format (#20484 ) CI / AMD64 Build (push) Waiting to run Details CI / ARM Build (push) Waiting to run Details CI / Jetson Jetpack 6 (push) Waiting to run Details CI / AMD64 Extra Build (push) Blocked by required conditions Details CI / ARM Extra Build (push) Blocked by required conditions Details CI / Synaptics Build (push) Blocked by required conditions Details CI / Assemble and push default build (push) Blocked by required conditions Details * save clean webp instead of png * send clean webp to plus with fallback for old events * manual event webp * event cleanup * api def * convert png to webp if exists * update reference config * change quality	2025-10-14 07:08:41 -06:00
Nicolas MowenandGitHub	bf22d89f67	Improve Face Library Management (#17213 ) * Set maximum number of face images to be kept * Fix vertical camera scaling * adjust wording * Add attributes to search data * Add button to train face from event * Handle event id saving in API	2025-03-17 16:57:46 -05:00
Nicolas MowenandGitHub	f49a8009ec	Remove thumb from database field (#16647 ) * Remove thumbnail from dict * Create thumbnail diectory * Cleanup handling of tracked object images * Make thumbnail optional * Handle cases where thumbnail is used * Expand options for thumbnail api * Fix up the does not exist condition * Remove absolute usages of thumbnails * Write thumbnails for external events * Reduce webp quality * Use webp everywhere in frontend * Formatting * Always consider all events when re-indexing * Add thumbnail deletion and cleanup path management * Cleanup imports * Rename def * Don't save thumbnail for every object * Correct event count * Use correct function * Include thumbnail in query * Remove unused * Fix requiring exception	2025-02-18 07:46:29 -07:00