splitsec2 89663e32f6 Merge commit from fork ...

A user's personal notification routes were sent to any Apprise URL, from the server. Through the test endpoint or a saved route a signed-in user could make the server POST to loopback, link-local and LAN hosts, choosing the path and, with Apprise's + and : parameters, extra headers and body fields.

User routes are now limited to the hosted services that talk to a fixed vendor host (discord, slack, tgram, pover, pbul) and to ntfy and gotify, whose host must resolve only to public addresses (checked on the host urlsplit reads and on the host Apprise reads, including IPv4-mapped and numeric forms). The check runs when a route is tested, when an event is queued and again when it is sent. Admin routes are unchanged.

2026-10-20 23:39:46 -04:00

..

fixtures

Add a {Language} naming template variable, and consolidate language resolution (#1142)

2026-07-28 15:19:59 -04:00

__init__.py

Template based file naming and torrent hardlinking (#385)

2026-01-01 12:35:22 +00:00

test_activity_routes_api.py

fix(activity): answer another user's item like a missing one, and skip foreign history rows (#1507)

2026-10-20 23:39:25 -04:00

test_activity_terminal_snapshots.py

Backend test hardening + quality enforcement (#872)

2026-04-12 12:01:52 +01:00

test_activity_view_state_service.py

Backend test hardening + quality enforcement (#872)

2026-04-12 12:01:52 +01:00

test_admin_users_api.py

feat: narrator, series and bitrate columns for MyAnonamouse results (#1390)

2026-09-25 19:17:23 -04:00

test_api_key_env.py

feat(api): add a read-only API key and a /api/stats endpoint (#1419)

2026-10-02 22:45:48 -04:00

test_audiobook_format_consistency.py

Stop dropping audiobook releases that are not m4b or mp3 (#1199)

2026-08-13 13:51:40 -04:00

test_auth_api.py

feat(auth): provision proxy users as non-admin once an admin exists (#1356)

2026-09-19 23:27:13 -04:00

test_author_sort_template_variable.py

feat(naming): add {AuthorSort} template variable (#1484)

2026-10-20 01:22:05 -04:00

test_booklore_multiuser.py

Backend test hardening + quality enforcement (#872)

2026-04-12 12:01:52 +01:00

test_booklore_upload.py

Patch: Various feature additions (#625)

2026-02-20 09:53:47 +00:00

test_builtin_admin_sync.py

Misc fixes (#718)

2026-03-07 10:30:47 +00:00

test_builtin_multiuser.py

Backend test hardening + quality enforcement (#872)

2026-04-12 12:01:52 +01:00

test_config_access_guardrails.py

Fix LOG_LEVEL being ignored and Z-Library 503 cookie gate (#1188)

2026-08-11 23:27:44 -04:00

test_config_api.py

feat(search): add a configurable default content type (#1371)

2026-09-25 18:14:42 -04:00

test_config_user_overrides.py

Merge commit from fork

2026-10-20 23:35:02 -04:00

test_cover_proxy_api.py

fix(covers): key the cover cache by the image URL, not the caller-supplied id (#1505)

2026-10-20 23:35:42 -04:00

test_cwa_user_sync.py

fix: sync renamed CWA usernames safely (#1203)

2026-08-15 11:40:32 -04:00

test_debug_routes_admin.py

Merge commit from fork

2026-10-20 23:34:32 -04:00

test_destination_file_organization.py

Add configurable word separator for naming templates (#1333)

2026-09-17 15:52:21 -04:00

test_download_api_guardrails.py

fix: unbreak main and follow up on the Blackhole handoff review (#1346)

2026-09-17 16:27:53 -04:00

test_download_history_service.py

fix(activity): a reused release follows the new request, and stale rows of a delivered request are closed (#1496)

2026-10-20 23:20:04 -04:00

test_download_processing.py

Fix FUSE copy fallback (#957)

2026-05-08 11:17:49 +01:00

test_first_author_template_variable.py

feat(naming): add {FirstAuthor} template token (#1322)

2026-09-11 00:47:37 -04:00

test_gen_debug_env_filter.py

fix(debug): keep SHELFMARK_API_KEY_READONLY out of the debug bundle (#1432)

2026-10-20 00:59:10 -04:00

test_hardlink.py

fix: group multi-file audiobooks that arrive as an archive (#1254)

2026-08-21 10:43:06 -04:00

test_image_cache.py

fix(covers): key the cover cache by the image URL, not the caller-supplied id (#1505)

2026-10-20 23:35:42 -04:00

test_language_template_variable.py

Add a {Language} naming template variable, and consolidate language resolution (#1142)

2026-07-28 15:19:59 -04:00

test_languages.py

Add a {Language} naming template variable, and consolidate language resolution (#1142)

2026-07-28 15:19:59 -04:00

test_library_index.py

fix(library): back off after a failed index instead of retrying for every result (#1430)

2026-10-20 00:58:49 -04:00

test_library_provider_calibre.py

feat(library): mark search results already in a Calibre library (#1377)

2026-09-25 18:18:10 -04:00

test_logger.py

fix/redact log secrets (#1488)

2026-10-20 01:55:49 -04:00

test_manual_query.py

feat(search): let each user pick their own default book languages (#1255)

2026-08-24 17:57:21 -04:00

test_metadata_search_library.py

feat(library): mark search results already in a Calibre library (#1377)

2026-09-25 18:18:10 -04:00

test_mirrors_config.py

Direct source refactor (#895)

2026-04-15 18:50:13 +01:00

test_naming.py

Add configurable word separator for naming templates (#1333)

2026-09-17 15:52:21 -04:00

test_narrator_template_variable.py

feat(naming): {Narrator} placeholder and MyAnonamouse series fallback (#1407)

2026-10-02 22:45:10 -04:00

test_notifications_settings_api.py

Backend test hardening + quality enforcement (#872)

2026-04-12 12:01:52 +01:00

test_notifications_user_routes.py

Merge commit from fork

2026-10-20 23:39:46 -04:00

test_notifications.py

Backport bug fixes from NemesisHubris/litfinder (addresses #999, #956, #1010, #1021, #1025, #1040) (#1066)

2026-06-15 00:28:43 -04:00

test_oidc_auth.py

Backend test hardening + quality enforcement (#872)

2026-04-12 12:01:52 +01:00

test_oidc_integration.py

fix(auth): fail closed when auth prerequisites are missing (#1387) (#1397)

2026-09-25 18:56:16 -04:00

test_oidc_routes.py

fix(oidc): reject backslash paths in the return_to sanitizer (#1359)

2026-09-20 12:51:21 -04:00

test_onboarding.py

Direct source refactor (#895)

2026-04-15 18:50:13 +01:00

test_original_name_template_variable.py

Linter followup (#868)

2026-04-11 16:18:52 +01:00

test_part_number_extraction.py

fix(naming): respect subfolder order when assigning audiobook part numbers (#1123)

2026-07-21 15:41:03 -04:00

test_path_mappings.py

Contain remote path mappings (#974)

2026-05-10 09:29:49 +01:00

test_per_user_downloads.py

Backend test hardening + quality enforcement (#872)

2026-04-12 12:01:52 +01:00

test_permission_handling.py

fix/bypass stall watchdog (#1186)

2026-08-11 12:23:34 -04:00

test_primary_title_template_variable.py

PrimaryTitle field and path template enhancements (#908)

2026-04-23 20:56:10 +01:00

test_processing_integration.py

fix(download): send every file of a multi-file download to the browser (#1489)

2026-10-20 02:33:53 -04:00

test_processing_packs.py

feat(packs): let users choose which files, books and formats to download (#1480)

2026-10-20 02:03:05 -04:00

test_provider_account_access.py

fix(metadata): only an admin may use the provider's own account, its lists and shelves (#1501)

2026-10-20 23:29:05 -04:00

test_proxy_headers.py

Fix OIDC redirects on custom ports (#1180)

2026-08-11 01:05:23 -04:00

test_queue_passing_over.py

feat(download): a concurrency limit per source (#1495)

2026-10-20 23:19:33 -04:00

test_queue.py

fix(queue): first terminal status wins, so a late COMPLETE cannot overwrite a cancel (#1429)

2026-10-20 01:00:21 -04:00

test_release_inspect_routes.py

feat(packs): inspect multi-book releases and file each book separately (#1270)

2026-08-27 00:40:08 -04:00

test_release_routes_policy.py

fix(releases): apply the request policy to release listing, not only to download (#1506)

2026-10-20 23:38:40 -04:00

test_release_search.py

fix(release-search): report a ValueError from a source as that source's error (#1433)

2026-10-20 00:59:54 -04:00

test_releases_api_budget.py

fix(search): reach the server's deadline, query one author (#1285, #1252) (#1287)

2026-09-01 12:38:57 -04:00

test_releases_api_direct_provider.py

feat(search): let each user pick their own default book languages (#1255)

2026-08-24 17:57:21 -04:00

test_releases_api_title_override.py

fix(metadata): show the translation a search matched on Open Library and Hardcover (#1451)

2026-10-20 01:08:45 -04:00

test_request_helpers.py

Download history refactor pt3 (#706)

2026-03-05 19:53:22 +00:00

test_request_policy.py

Backend test hardening + quality enforcement (#872)

2026-04-12 12:01:52 +01:00

test_request_routes_api.py

feat(requests): let an admin reopen a rejected request (#1491)

2026-10-20 23:20:26 -04:00

test_requests_service.py

fix(requests): an older failed attempt no longer undoes a later delivery (#1493)

2026-10-20 23:21:16 -04:00

test_search_author_narrowing.py

fix(irc): search by surname, and rank the answer by author (#1331) (#1332)

2026-09-11 22:14:37 -04:00

test_search_deadline.py

fix: search, Prowlarr and qBittorrent follow-ups (#1276, #1283) (#1284)

2026-08-30 03:09:13 -04:00

test_search_plan_language_codes.py

fix: search, Prowlarr and qBittorrent follow-ups (#1276, #1283) (#1284)

2026-08-30 03:09:13 -04:00

test_search_plan.py

fix: trim a credit list in search_author to the first name (#1290)

2026-09-01 11:08:39 -04:00

test_self_user_notification_preferences_api.py

Backend test hardening + quality enforcement (#872)

2026-04-12 12:01:52 +01:00

test_self_user_routes.py

Merge commit from fork

2026-10-20 23:35:02 -04:00

test_startup_reconcile.py

fix(activity): a reused release follows the new request, and stale rows of a delivered request are closed (#1496)

2026-10-20 23:20:04 -04:00

test_stats.py

feat(api): add a read-only API key and a /api/stats endpoint (#1419)

2026-10-02 22:45:48 -04:00

test_text_match.py

feat(library): mark search results already in a Calibre library (#1377)

2026-09-25 18:18:10 -04:00

test_user_db.py

fix: sync renamed CWA usernames safely (#1203)

2026-08-15 11:40:32 -04:00

test_user_template_variable.py

Add OIDC authentication and multi-user support (#606)

2026-02-11 17:44:27 +00:00

test_utils.py

Backport bug fixes from NemesisHubris/litfinder (addresses #999, #956, #1010, #1021, #1025, #1040) (#1066)

2026-06-15 00:28:43 -04:00

test_viewer_redaction.py

fix: keep https:// for qBittorrent and hide release sources from non-admins (#1422)

2026-10-02 20:38:58 -04:00

test_websocket_manager.py

Add new python tooling + apply ruff linter cleanup (#845)

2026-04-10 13:03:25 +01:00