splitsec2 4f97fc9bec fix: keep server paths and URLs out of an error response and a debug log (#1558) ...

Two small leaks from going through the open CodeQL alerts (code scanning
alerts 100 and 123).

The local download route returned `str(e)` on an OSError, and for a
missing or unreadable file that text is the file's path on the server
(`[Errno 2] No such file or directory:
'/audiobooks/Author/Title.epub'`). #1422 cuts a non-admin's download
path down to the file name everywhere else, so this put it back. The
route now answers "Could not read the file" and the detail stays in the
log.

`should_bypass_proxy` logged the whole request URL at debug when it
could not be parsed. URLs can carry credentials, so it logs only the
exception now.

Each change has a test that fails without it. The full non-e2e suite,
ruff and basedpyright pass.

2026-10-23 01:52:39 -06:00

..

fixtures

feat(hardcover): owned books, simpler queries, dead sources and failed releases (#1535)

2026-10-23 01:08:00 -06:00

__init__.py

Template based file naming and torrent hardlinking (#385)

2026-01-01 12:35:22 +00:00

conftest.py

feat(hardcover): retries, error counting and a back-off for requests nothing matches (#1534)

2026-10-23 00:58:42 -06:00

fakes.py

feat(hardcover): retries, error counting and a back-off for requests nothing matches (#1534)

2026-10-23 00:58:42 -06:00

test_activity_routes_api.py

fix: keep server paths and URLs out of an error response and a debug log (#1558)

2026-10-23 01:52:39 -06:00

test_activity_terminal_snapshots.py

fix: review regressions in metadata, notifications, activity redaction, search options and genDebug (#1510)

2026-10-21 01:58:41 -04:00

test_activity_view_state_service.py

Backend test hardening + quality enforcement (#872)

2026-04-12 12:01:52 +01:00

test_admin_users_api.py

Merge commit from fork

2026-10-21 02:05:05 -04:00

test_api_key_env.py

feat(api): add a read-only API key and a /api/stats endpoint (#1419)

2026-10-02 22:45:48 -04:00

test_audiobook_format_consistency.py

Stop dropping audiobook releases that are not m4b or mp3 (#1199)

2026-08-13 13:51:40 -04:00

test_auth_api.py

perf: cut repeated work on the status and activity paths (#1545)

2026-10-22 20:27:07 -04:00

test_author_sort_template_variable.py

feat(naming): add {AuthorSort} template variable (#1484)

2026-10-20 01:22:05 -04:00

test_auto_download_hardcover_throttle.py

feat(hardcover): retries, error counting and a back-off for requests nothing matches (#1534)

2026-10-23 00:58:42 -06:00

test_auto_download.py

feat(hardcover): owned books, simpler queries, dead sources and failed releases (#1535)

2026-10-23 01:08:00 -06:00

test_booklore_multiuser.py

Backend test hardening + quality enforcement (#872)

2026-04-12 12:01:52 +01:00

test_booklore_upload.py

Patch: Various feature additions (#625)

2026-02-20 09:53:47 +00:00

test_builtin_admin_sync.py

Misc fixes (#718)

2026-03-07 10:30:47 +00:00

test_builtin_multiuser.py

Backend test hardening + quality enforcement (#872)

2026-04-12 12:01:52 +01:00

test_config_access_guardrails.py

Fix LOG_LEVEL being ignored and Z-Library 503 cookie gate (#1188)

2026-08-11 23:27:44 -04:00

test_config_api.py

feat(search): add a configurable default content type (#1371)

2026-09-25 18:14:42 -04:00

test_config_user_overrides.py

feat(notifications): add {User}/{Email} placeholders to per-user routes (#1499)

2026-10-22 15:29:34 -04:00

test_cover_proxy_api.py

fix(covers): key the cover cache by the image URL, not the caller-supplied id (#1505)

2026-10-20 23:35:42 -04:00

test_custom_script_argv.py

Merge commit from fork

2026-10-21 01:34:38 -04:00

test_cwa_user_sync.py

fix: sync renamed CWA usernames safely (#1203)

2026-08-15 11:40:32 -04:00

test_db_busy_timeout.py

fix(db): wait up to 30 s for a busy writer instead of SQLite's 5 s default (#1539)

2026-10-22 20:21:49 -04:00

test_debug_routes_admin.py

Merge commit from fork

2026-10-20 23:34:32 -04:00

test_destination_file_organization.py

Add configurable word separator for naming templates (#1333)

2026-09-17 15:52:21 -04:00

test_download_api_guardrails.py

fix: unbreak main and follow up on the Blackhole handoff review (#1346)

2026-09-17 16:27:53 -04:00

test_download_history_service.py

fix(activity): a reused release follows the new request, and stale rows of a delivered request are closed (#1496)

2026-10-20 23:20:04 -04:00

test_download_processing.py

Fix FUSE copy fallback (#957)

2026-05-08 11:17:49 +01:00

test_existence_check.py

feat(hardcover): owned books, simpler queries, dead sources and failed releases (#1535)

2026-10-23 01:08:00 -06:00

test_filename_traversal.py

Merge commit from fork

2026-10-20 23:40:16 -04:00

test_first_author_template_variable.py

feat(naming): add {FirstAuthor} template token (#1322)

2026-09-11 00:47:37 -04:00

test_format_defaults.py

refactor: one default and one reader for the Supported Book Formats list (#1532)

2026-10-22 15:32:00 -04:00

test_gen_debug_env_filter.py

fix: review regressions in metadata, notifications, activity redaction, search options and genDebug (#1510)

2026-10-21 01:58:41 -04:00

test_hardcover_scheduler.py

feat(hardcover): owned books, simpler queries, dead sources and failed releases (#1535)

2026-10-23 01:08:00 -06:00

test_hardcover_sync.py

feat(hardcover): retries, error counting and a back-off for requests nothing matches (#1534)

2026-10-23 00:58:42 -06:00

test_hardlink.py

fix: group multi-file audiobooks that arrive as an archive (#1254)

2026-08-21 10:43:06 -04:00

test_image_cache.py

perf: cut repeated work on search and cover paths (#1544)

2026-10-22 20:24:57 -04:00

test_language_template_variable.py

Add a {Language} naming template variable, and consolidate language resolution (#1142)

2026-07-28 15:19:59 -04:00

test_languages.py

Add a {Language} naming template variable, and consolidate language resolution (#1142)

2026-07-28 15:19:59 -04:00

test_library_index.py

feat(hardcover): ebooks, audiobooks or both, and stricter matching for automatic downloads (#1533)

2026-10-23 00:41:13 -06:00

test_library_provider_audiobookshelf.py

feat(hardcover): owned books, simpler queries, dead sources and failed releases (#1535)

2026-10-23 01:08:00 -06:00

test_library_provider_calibre.py

feat(hardcover): owned books, simpler queries, dead sources and failed releases (#1535)

2026-10-23 01:08:00 -06:00

test_logger.py

fix/redact log secrets (#1488)

2026-10-20 01:55:49 -04:00

test_manual_query.py

feat(search): let each user pick their own default book languages (#1255)

2026-08-24 17:57:21 -04:00

test_metadata_search_library.py

feat(metadata): add Deutsche Nationalbibliothek (DNB) metadata provider (#1547)

2026-10-22 20:37:15 -04:00

test_mirrors_config.py

Direct source refactor (#895)

2026-04-15 18:50:13 +01:00

test_naming.py

Add configurable word separator for naming templates (#1333)

2026-09-17 15:52:21 -04:00

test_narrator_template_variable.py

feat(naming): {Narrator} placeholder and MyAnonamouse series fallback (#1407)

2026-10-02 22:45:10 -04:00

test_notifications_settings_api.py

Backend test hardening + quality enforcement (#872)

2026-04-12 12:01:52 +01:00

test_notifications_user_routes.py

feat(notifications): add {User}/{Email} placeholders to per-user routes (#1499)

2026-10-22 15:29:34 -04:00

test_notifications.py

feat(notifications): add {User}/{Email} placeholders to per-user routes (#1499)

2026-10-22 15:29:34 -04:00

test_oidc_auth.py

Backend test hardening + quality enforcement (#872)

2026-04-12 12:01:52 +01:00

test_oidc_integration.py

fix(auth): fail closed when auth prerequisites are missing (#1387) (#1397)

2026-09-25 18:56:16 -04:00

test_oidc_routes.py

fix(oidc): reject backslash paths in the return_to sanitizer (#1359)

2026-09-20 12:51:21 -04:00

test_onboarding.py

feat(metadata): add Deutsche Nationalbibliothek (DNB) metadata provider (#1547)

2026-10-22 20:37:15 -04:00

test_original_name_template_variable.py

Linter followup (#868)

2026-04-11 16:18:52 +01:00

test_part_number_extraction.py

fix(naming): respect subfolder order when assigning audiobook part numbers (#1123)

2026-07-21 15:41:03 -04:00

test_path_mappings.py

Contain remote path mappings (#974)

2026-05-10 09:29:49 +01:00

test_per_user_downloads.py

Merge commit from fork

2026-10-21 02:05:05 -04:00

test_permission_handling.py

fix/bypass stall watchdog (#1186)

2026-08-11 12:23:34 -04:00

test_primary_title_template_variable.py

PrimaryTitle field and path template enhancements (#908)

2026-04-23 20:56:10 +01:00

test_processing_integration.py

fix(download): send every file of a multi-file download to the browser (#1489)

2026-10-20 02:33:53 -04:00

test_processing_packs.py

feat(packs): let users choose which files, books and formats to download (#1480)

2026-10-20 02:03:05 -04:00

test_provider_account_access.py

fix(metadata): only an admin may use the provider's own account, its lists and shelves (#1501)

2026-10-20 23:29:05 -04:00

test_proxy_headers.py

Fix OIDC redirects on custom ports (#1180)

2026-08-11 01:05:23 -04:00

test_queue_passing_over.py

feat(download): a concurrency limit per source (#1495)

2026-10-20 23:19:33 -04:00

test_queue.py

fix(queue): a late progress update no longer reopens a finished task (#1538)

2026-10-22 20:19:16 -04:00

test_release_inspect_routes.py

feat(packs): inspect multi-book releases and file each book separately (#1270)

2026-08-27 00:40:08 -04:00

test_release_routes_policy.py

fix(releases): apply the request policy to release listing, not only to download (#1506)

2026-10-20 23:38:40 -04:00

test_release_search.py

feat(hardcover): ebooks, audiobooks or both, and stricter matching for automatic downloads (#1533)

2026-10-23 00:41:13 -06:00

test_releases_api_budget.py

fix(search): give each provider its own slice of the search budget (#1537)

2026-10-22 20:17:44 -04:00

test_releases_api_direct_provider.py

feat(search): let each user pick their own default book languages (#1255)

2026-08-24 17:57:21 -04:00

test_releases_api_title_override.py

fix(metadata): show the translation a search matched on Open Library and Hardcover (#1451)

2026-10-20 01:08:45 -04:00

test_request_helpers.py

Download history refactor pt3 (#706)

2026-03-05 19:53:22 +00:00

test_request_policy.py

Backend test hardening + quality enforcement (#872)

2026-04-12 12:01:52 +01:00

test_request_routes_api.py

feat(requests): let an admin reopen a rejected request (#1491)

2026-10-20 23:20:26 -04:00

test_requests_service.py

perf: cut repeated work on the status and activity paths (#1545)

2026-10-22 20:27:07 -04:00

test_search_author_narrowing.py

fix(irc): search by surname, and rank the answer by author (#1331) (#1332)

2026-09-11 22:14:37 -04:00

test_search_deadline.py

fix(search): give each provider its own slice of the search budget (#1537)

2026-10-22 20:17:44 -04:00

test_search_plan_language_codes.py

fix: search, Prowlarr and qBittorrent follow-ups (#1276, #1283) (#1284)

2026-08-30 03:09:13 -04:00

test_search_plan.py

fix: trim a credit list in search_author to the first name (#1290)

2026-09-01 11:08:39 -04:00

test_self_user_notification_preferences_api.py

Backend test hardening + quality enforcement (#872)

2026-04-12 12:01:52 +01:00

test_self_user_routes.py

Merge commit from fork

2026-10-21 02:05:05 -04:00

test_settings_reload.py

perf: cut repeated work on search and cover paths (#1544)

2026-10-22 20:24:57 -04:00

test_socketio_origins.py

Merge commit from fork

2026-10-21 01:34:38 -04:00

test_startup_reconcile_guard.py

fix(startup): the reconcile guard catches the same errors the rest of main.py does (#1540)

2026-10-22 20:22:21 -04:00

test_startup_reconcile.py

fix(activity): a reused release follows the new request, and stale rows of a delivered request are closed (#1496)

2026-10-20 23:20:04 -04:00

test_stats.py

feat(api): add a read-only API key and a /api/stats endpoint (#1419)

2026-10-02 22:45:48 -04:00

test_text_match.py

feat(hardcover): ebooks, audiobooks or both, and stricter matching for automatic downloads (#1533)

2026-10-23 00:41:13 -06:00

test_user_db.py

perf: cut repeated work on the status and activity paths (#1545)

2026-10-22 20:27:07 -04:00

test_user_template_variable.py

Add OIDC authentication and multi-user support (#606)

2026-02-11 17:44:27 +00:00

test_utils.py

Backport bug fixes from NemesisHubris/litfinder (addresses #999, #956, #1010, #1021, #1025, #1040) (#1066)

2026-06-15 00:28:43 -04:00

test_viewer_redaction.py

fix(redaction): a non-admin's status message loses the links it quotes (#1541)

2026-10-22 20:26:47 -04:00

test_websocket_manager.py

Add new python tooling + apply ruff linter cleanup (#845)

2026-04-10 13:03:25 +01:00