Commit Graph

1111 Commits

Author SHA1 Message Date
jvoisin
42dc36cc10 Escape comment columns names
Custom columns of type comments are rendered with `|safe` (disabling Jinja2
auto-escaping) and no `clean_string` sanitization. Compare with regular book
comments which correctly use `{{ entry.comments[0].text|clean_string|safe }}`.

Any user with edit permissions can set a custom comment column to
`<script>alert(document.cookie)</script>` and it will execute for every user who
views the book detail page or the OPDS feed. This is stored XSS with no
authentication barrier beyond edit permission.
2026-04-15 23:03:30 +02:00
Ozzie Isaacs
088778969d Better error handling on series display in basic view 2026-04-06 15:28:10 +02:00
Ozzie Isaacs
7c715f34dc Clean strings in comments before displaying 2026-04-03 09:01:01 +02:00
Webysther Sperandio
5ad6b7fa64 💄 style(ui): limit add-to-shelves dropdown height
- 【style】 constrain add-to-shelves dropdown height and enable scroll
  - 【style】 prevent overly tall menus from overflowing the page
2026-01-26 19:39:36 +01:00
Ozzie Isaacs
486914905e Merge branch 'Develop'
# Conflicts:
#	test/Calibre-Web TestSummary_Linux.html
2026-01-24 20:50:59 +01:00
Ozzie Isaacs
d47af66499 Bugfix after testrun 2026-01-24 13:01:12 +01:00
Ozzie Isaacs
8db0d004b6 Remove Get Parameter sort_param, where it is not valid (#3447) 2026-01-18 16:07:04 +01:00
Ozzie Isaacs
cf3b619c73 Fix for #3520 (Mass remove books from shelf) 2026-01-18 12:59:40 +01:00
Ozzie Isaacs
47168f5ce9 Merge remote-tracking branch 'typo-epub-reader/webysther-deprecated-apple-meta' 2026-01-17 12:18:17 +01:00
Webysther Sperandio
d77d682ee0 Replace apple-mobile-web-app-capable with mobile-web-app-capable
https://web.dev/learn/pwa/web-app-manifest?hl=pt-br#designing_your_pwa_experience
2026-01-16 06:13:03 +01:00
Webysther Sperandio
e2eed3d311 Update layout.html
https://web.dev/learn/pwa/web-app-manifest?hl=pt-br#designing_your_pwa_experience
2026-01-16 06:12:45 +01:00
Webysther Sperandio
54a47cfc18 Change meta tag for mobile web app capability
https://web.dev/learn/pwa/web-app-manifest?hl=pt-br#designing_your_pwa_experience
2026-01-16 06:12:21 +01:00
Webysther Sperandio
b5dac9e1a7 Change meta tag for mobile web app capability
https://web.dev/learn/pwa/web-app-manifest?hl=pt-br#designing_your_pwa_experience
2026-01-16 06:12:02 +01:00
Webysther Sperandio
b00abd283a Update readtxt.html
https://web.dev/learn/pwa/web-app-manifest?hl=pt-br#designing_your_pwa_experience
2026-01-16 06:11:29 +01:00
Webysther Sperandio
4821b2b34c Change meta tag from apple-mobile to mobile-web app
https://web.dev/learn/pwa/web-app-manifest?hl=pt-br#designing_your_pwa_experience
2026-01-16 06:10:54 +01:00
Webysther Sperandio
0e31be5357 Change meta tag for mobile web app capability
https://web.dev/learn/pwa/web-app-manifest?hl=pt-br#designing_your_pwa_experience
2026-01-16 06:10:36 +01:00
Webysther Sperandio
dc19d40db1 Change meta tag for mobile web app capability
https://web.dev/learn/pwa/web-app-manifest?hl=pt-br#designing_your_pwa_experience
2026-01-16 06:10:05 +01:00
Webysther Sperandio
02b5409b95 TYPO
Fix theme selection prompt in read.html
2026-01-16 05:57:31 +01:00
Ozzie Isaacs
8b8bc1b688 Merge remote-tracking branch 'show-shelf-size/show-shelf-size'
Added some missing texts to caliblur theme
Caliblur theme fix language icon
2025-12-07 19:32:40 +01:00
Ozzie Isaacs
eb872865a5 Merge Reader improvements 2025-12-07 14:31:16 +01:00
Ozzie Isaacs
25c9aba469 Fix vertical scrollbar in list.html 2025-12-06 19:26:30 +01:00
Ozzie Isaacs
cf1b3bb37f Merge remote-tracking branch 'de/patch-1' 2025-11-22 15:29:39 +01:00
IgorKurkov
458d0d1e3d feat(read.html, epub): add custom theme selection with color picker, used pickr.js 2025-10-29 22:10:08 +01:00
IgorKurkov
6d6d5ac097 add books button, add page count on bottom and in settings, add swipe for closing sidebar, fix settings modal, fix few styles 2025-10-29 22:06:09 +01:00
IgorKurkov
560e8e132d add swipes by gestures in settings as an option, hammer.js for mobile 2025-10-29 20:37:15 +01:00
IgorKurkov
902368efa7 feat(epub.js): add saving for settings of the font family to localstorage 2025-10-26 18:47:56 +01:00
IgorKurkov
c5571fc359 feat(epub.js): add font size selector with precised + and - controls 2025-10-26 18:40:52 +01:00
IgorKurkov
132c17151a feat(epub.js): add font size saving in localstorage like theme saving 2025-10-26 18:24:44 +01:00
IgorKurkov
1ce1aee35e fix(js reader): adjust height to dynamic viewport height, add amber theme 2025-10-26 18:23:07 +01:00
Ozzie Isaacs
cfda7f109a Merge remote-tracking branch 'books_api/cjwin2000-google_books_apikey' 2025-09-09 09:59:49 +02:00
Ozzie Isaacs
714c19f558 Some code cosmetics 2025-09-08 17:31:43 +02:00
Ozzie Isaacs
c2d2db913e Merge remote-tracking branch 'opds/opds_improvements' 2025-09-08 15:59:33 +02:00
Syer10
9aab6d90f7 Keep tags since its now in html 2025-08-15 11:51:14 -04:00
Syer10
5cd914f007 Fix newlines 2025-08-15 11:41:38 -04:00
Syer10
3a899afcce Opds Improvements 2025-08-15 11:10:14 -04:00
Ozzie Isaacs
f3a4df1759 Merge branch 'master' into Develop 2025-07-04 20:22:11 +02:00
Oskar Manhart
054256067a Merge remote-tracking branch 'upstream' 2025-05-04 11:46:07 +02:00
David Champion
d32ad1d5ca Show shelf sizes in layout 2025-04-03 13:14:15 -07:00
Ozzie Isaacs
d75adfe85e Improved testability 2025-03-31 19:06:53 +02:00
Ozzie Isaacs
dbdaa0884e Merge branch 'master' into Develop 2025-03-30 13:48:08 +02:00
Ozzie Isaacs
2b2ccb1710 Refactored epub-reader progress
Progress in epubs now visible also in dark mode(s)
2025-03-30 12:23:13 +02:00
Ozzie Isaacs
1b1b7455d2 Merge branch 'master' into Develop 2025-03-30 09:42:58 +02:00
Ozzie Isaacs
6bfe022de0 Update Teststatus 2025-03-26 06:56:53 +01:00
Ozzie Isaacs
c6cde961b6 Revert Change to reenable change database function 2025-03-25 06:08:08 +01:00
Ozzie Isaacs
d08acdc3cc Merge branch 'master' into Develop 2025-03-24 18:59:12 +01:00
Ross Williams
22a93a28e2 Refactor epub reader progress calculation
The code in epub-progress.js was causing the epub file to be loaded
twice over the network, because it created a second instance of the
epub.js library. I moved all the progress percentage display code into
epub.js. Only the locationchange polyfill code was left in the separate
file, renamed to locationchange-polyfill.js.

I rewrote the percentage progress code to use epub.js events,
giving more succinct and readable code. Also, I added localStorage
caching of the epub location calculations, required for displaying
percentage progress, which can take up to 60-90 seconds to calculate on
longer ebooks. This localStorage caching approach is recommended by
epub.js in the `locations.html` example in their repo.

Signed-off-by: Ross Williams <ross@ross-williams.net>
2025-02-21 04:15:37 +00:00
Robbinsch
90bccb86ef fix: right html in config_db 2025-01-25 17:52:01 +01:00
cjwin2000
bf31e675db Update config_edit.html 2025-01-10 20:28:09 -05:00
Ozzie Isaacs
4512ab4524 Renamed pdf reader javascript files (#3277) 2025-01-06 14:54:09 +01:00
Ozzie Isaacs
0afba50953 Merge branch 'master' into Develop 2024-12-14 14:54:00 +01:00