Commit Graph
5 Commits
Author SHA1 Message Date
google-labs-jules[bot]andPR0M3TH3AN 412ed2aae4 security: fix magnet parameter injection and data loss
- Fix magnet parameter injection vulnerability in `js/magnetShared.js` by ensuring all parameter values are decoded during normalization and re-encoded during URI construction.
- Fix a data loss bug in `normalizeMagnetInput` where parameter values containing `=` were truncated due to `split("=", 2)`.
- Consistently decode all magnet parameter values to ensure a clean internal representation.
- Use `encodeURIComponent` in `buildMagnetUri` to safely reconstruct the magnet URI.
- Update `tests/edit-modal-submit-state.test.mjs` to handle encoded magnet URIs.

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-11 11:31:00 +00:00
thePR0M3TH3AN e5556c938e Fix edit modal magnet hint refresh 2025-10-27 18:19:14 -04:00
thePR0M3TH3AN cf1f966f60 Fix edit modal error after successful submit 2025-10-26 12:07:17 -04:00
thePR0M3TH3AN dd8b0b9907 Add NSFW and kids toggles to edit modal 2025-10-09 22:10:46 -04:00
thePR0M3TH3AN ebc306c928 Prevent duplicate edit submissions 2025-10-08 16:27:04 -04:00