Josh HawkinsandGitHub 33cb8d987d pass only the request path in X-Original-URL (#24602) ...

nginx built X-Original-URL from the client's Host header plus the request path, so a Host containing '#' or '?' pushed the real path into the URL fragment or query. The media and go2rtc auth checks then saw an empty path and allowed restricted-role users to read other cameras' clips, recordings, exports and live streams. The header now carries only $request_uri, which is all the auth checks need.

2026-10-09 07:44:53 -05:00

..

rootfs

pass only the request path in X-Original-URL (#24602)

2026-10-09 07:44:53 -05:00

build_intel_media_driver.sh

Manually build intel driver (#22881)

2026-04-15 07:07:27 -05:00

build_nginx.sh

http2 (#22379)

2026-03-11 08:32:16 -05:00

build_ov_model.py

Miscellaneous fixes (0.18 beta) (#23854)

2026-07-29 08:39:01 -06:00

build_pysqlite3.sh

Fix jetson build (#20808)

2025-11-05 07:10:56 -07:00

build_sqlite_vec.sh

Miscellaneous fixes (0.18 beta) (#23763)

2026-07-21 06:44:33 -06:00

Dockerfile

Update OpenVINO model generation (#23733)

2026-07-16 08:00:52 -06:00

fake_frigate_run

Community Supported Boards Framework (#7114)

2023-07-23 16:45:29 -05:00

install_deps.sh

Upgrade ffmpeg to 8 by default (#23393)

2026-06-03 12:28:28 -05:00

install_hailort.sh

Bump HailoRT to 4.21.0 for HAOS 16 compatibility (#18859)

2025-06-24 07:18:34 -06:00

install_memryx.sh

update installation code to hold SDK 2.1 version (#20781)

2025-11-03 13:23:51 -07:00

install_s6_overlay.sh

Update s6-overlay from 3.1.5.0 to 3.2.1.0 (#18276)

2025-05-18 07:21:26 -05:00

install_tempio.sh

fix tempio install for arm64 (#11691)

2024-06-02 08:47:11 -05:00

requirements-dev.txt

Increase ruff coverage (#23644)

2026-07-06 12:28:02 -05:00

requirements-ov.txt

Update OpenVINO model generation (#23733)

2026-07-16 08:00:52 -06:00

requirements-wheels.txt

remove all references to degirum in frigate (#23882)

2026-08-01 08:00:36 -06:00

requirements.txt

Various fixes (#20666)

2025-10-25 16:40:04 -05:00