Skip to content
GitLab

Path support and security improvements

Merged Warwick Harris requested to merge feature/path-support_and_pw-improvements into master

Created by: ghost

  1. Fixes a security issue where the password is sent as plaintext in the URL query parameters when methods from libsonic_extas are used. Also adds Subsonic hex encoding when using legacy auth.

  2. Adds support for URL paths like https://hostname.com/subsonic as requested in #17 (closed) and also encountered in some of the reports in #14 (closed) and #5 (closed)

  3. Fixes an error when the password only contains digits, which simpleplugin converts to a Long, which later fails when libsonic tries to salt the password expecting a string.