cloud/music_library
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,536 Commits 1 Branch 0 Tags
159d5ad695fba8c77d04eb0687ce0ab9f7b8a68f
Commit Graph

2536 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Claudio Ortolina 159d5ad695 Include more maintenance tasks 
- Asset tasks
- Records on this day email
 2026-03-11 09:31:59 +00:00
Claudio Ortolina 97e9cdf6c4 Spell out Purchased on label in records email 2026-03-11 08:40:42 +00:00
Claudio Ortolina d516c6a815 Improve tests for scrobble show page 2026-03-10 21:04:19 +00:00
Claudio Ortolina 20b497bbb8 Don't track route not found errors 2026-03-10 20:05:27 +00:00
Claudio Ortolina fa535393e0 Fix toggling/scrobbling event handlers in scrobble anything show view 2026-03-10 20:04:39 +00:00
Claudio Ortolina a6727d5a16 Update dependencies 
igniter: 0.7.3 → 0.7.4
phoenix_live_view: 1.1.26 → 1.1.27
 2026-03-10 17:02:14 +00:00
Claudio Ortolina 829d49fcf7 Fix deployment test script 2026-03-10 16:15:22 +00:00
Claudio Ortolina 59ac2a503f Space out lines a bit more 2026-03-10 15:13:28 +00:00
Claudio Ortolina 43dc81d051 Assert that generated PDF file always has one page 2026-03-10 15:09:33 +00:00
Claudio Ortolina 95302e069b Improve column detection heuristics 2026-03-10 14:56:25 +00:00
Claudio Ortolina 47ff505fa9 Refactor pdf rendering to use page-level columns 2026-03-10 14:22:11 +00:00
Claudio Ortolina 04955bff84 Fix notification skipping 2026-03-10 08:44:27 +00:00
Claudio Ortolina 8347bd04e8 Skip notifications for muted errors 2026-03-10 08:22:21 +00:00
Claudio Ortolina f86800368d Streamline test suite 
record_set_live/index_test.exs — Removed 3 describe blocks ("Delete set", "Remove record from set", "Drag-and-drop reorder") that were duplicated in ShowTest. Removed 3 tests.

record_set_live/show_test.exs — Replaced context-level assertion in "Remove record" with UI assertion (refute has_element?). Removed redundant assert_raise from "Delete set" (kept assert_redirect).

scrobble_rules_live/index_test.exs — Removed "Form validation" describe block (2 tests duplicated in "saves new scrobble_rule" and changeset tests). Kept the "updates form labels" test, moved into "Index"
  block. Replaced ScrobbleRules.get_scrobble_rule! assertions in toggle test with UI assertions checking button text.
online_store_template_live/index_test.exs — Replaced context-level assertions with UI assertions in Create, Edit, Delete, and Toggle tests. Removed OnlineStoreTemplates alias.

scrobbled_tracks_live/index_test.exs — Collapsed 3 search tests into 1. Removed 2 tests.
 2026-03-09 18:55:07 +00:00
Claudio Ortolina 3ddb287187 Fix csp directives for online store template logos 2026-03-09 18:30:29 +00:00
Claudio Ortolina 93aed6c310 Update npm dependencies 
barcode-detector 3.1.0 => 3.1.1
 2026-03-09 17:12:17 +00:00
Claudio Ortolina c352ad4809 Can print an individual medium tracklist 2026-03-09 14:52:26 +00:00
Claudio Ortolina 4c6baa6e13 Improve printout PDF layout 
Support multiple columns in case the tracklist is long, or there's
multiple media.
 2026-03-09 14:44:28 +00:00
Claudio Ortolina 347b80fe59 Update dependencies 
usage_rules 1.2.4 => 1.2.5
 2026-03-09 13:43:09 +00:00
Claudio Ortolina 4569c6727e Add function to download a record's tracklist for printing 2026-03-09 13:39:12 +00:00
Claudio Ortolina 1bc01a2346 Fix flaky collection live index test 2026-03-09 13:38:24 +00:00
Claudio Ortolina 7e515f61a7 Update dependencies 
telemetry 1.4.0 → 1.4.1
 2026-03-09 10:01:07 +00:00
Claudio Ortolina cca32b51ee Remove stray file 2026-03-09 08:16:14 +00:00
Claudio Ortolina f9845e8b7c Dry up CSP policies 2026-03-08 19:56:05 +00:00
Claudio Ortolina 77c45bddc6 Update CSP policies for musicbrainz covers + fallbacks 2026-03-08 19:54:00 +00:00
Claudio Ortolina 27519fca29 Fix CSP for images from brave 2026-03-08 19:47:43 +00:00
Claudio Ortolina 59616e58b5 Allow LiveDebugger origins in dev 2026-03-08 19:44:41 +00:00
Claudio Ortolina 4f8e2dc6e2 Update architecture docs 2026-03-08 14:04:23 +00:00
Claudio Ortolina b30f0fa1ee Add metrics around image resize/convert/dominant color extration 2026-03-08 13:56:31 +00:00
Claudio Ortolina 4584b7bcb8 Remove drop down from record set items 
Have just a bin icon, and rely on drag and drop.

This solves a massive performance issue with the page, which is
traceable to the Fluxon dropdowns, particularly the Class.merge logic
used to merge Tailwind classes
 2026-03-08 13:21:33 +00:00
Claudio Ortolina d76471b03e Use MDEx to consolidate Markdown handling 2026-03-08 09:31:09 +00:00
Claudio Ortolina ea8318c5fc Add update-dependencies skll 2026-03-08 09:09:33 +00:00
Claudio Ortolina 9433419576 Update mise run dev:outdated with instructional output 2026-03-08 08:57:36 +00:00
Claudio Ortolina fd9f3e7c0c WIP 2026-03-08 08:51:54 +00:00
Claudio Ortolina e4d03a19e4 Compute in advance all needed assigns in record_set_card 
Theory is that this makes change tracking easier, and therefore
rendering more performant.
 2026-03-07 23:52:32 +00:00
Claudio Ortolina 1bfe501b3d Split strings for readability 2026-03-07 23:44:00 +00:00
Claudio Ortolina 05354b9f78 Explain the CSP policies 2026-03-07 23:40:40 +00:00
Claudio Ortolina 46da8eea38 EXP: fix CSP issues for /dev routes 2026-03-07 21:07:24 +00:00
Claudio Ortolina 41480316c2 Fix CSP settings 
⏺ Here's a breakdown of each directive:

  ┌─────────────────┬────────────────────────────────────────────────┬─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┐
  │    Directive    │                     Value                      │                                                         Purpose                                                         │
  ├─────────────────┼────────────────────────────────────────────────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┤
  │ default-src     │ 'self'                                         │ Fallback for any resource type not explicitly listed — only allow from the app's own origin                             │
  ├─────────────────┼────────────────────────────────────────────────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┤
  │ script-src      │ 'self'                                         │ JavaScript can only be loaded from the app's origin (no external scripts, no inline)                                    │
  ├─────────────────┼────────────────────────────────────────────────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┤
  │ style-src       │ 'self' 'unsafe-inline' https://rsms.me         │ Stylesheets from the app's origin, inline styles (needed by LiveView), and the https://rsms.me/inter/ hosted on rsms.me │
  ├─────────────────┼────────────────────────────────────────────────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┤
  │ font-src        │ 'self' https://rsms.me                         │ Font files from the app's origin and rsms.me (Inter font)                                                               │
  ├─────────────────┼────────────────────────────────────────────────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┤
  │ img-src         │ 'self' data: https://lastfm.freetls.fastly.net │ Images from the app's origin, data: URIs (inline base64 images), and Last.fm's CDN for album/artist artwork             │
  ├─────────────────┼────────────────────────────────────────────────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┤
  │ connect-src     │ 'self'                                         │ XHR/fetch/WebSocket connections only to the app's origin (covers LiveView's WebSocket)                                  │
  ├─────────────────┼────────────────────────────────────────────────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┤
  │ frame-ancestors │ 'self'                                         │ The app can only be embedded in iframes by itself (clickjacking protection)                                             │
  ├─────────────────┼────────────────────────────────────────────────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┤
  │ base-uri        │ 'self'                                         │ Restricts <base> tag to the app's origin (prevents base tag injection attacks)                                          │
  └─────────────────┴────────────────────────────────────────────────┴─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┘

  Notable things not allowed by this policy:
  - No inline <script> tags or eval()
  - No external JavaScript from CDNs
  - No embedding in third-party iframes
  - No connections to external APIs from the browser (all external API calls go through the server)
 2026-03-07 19:13:48 +00:00
Claudio Ortolina 3938cbaf54 Run sobelow on CI 2026-03-07 19:09:02 +00:00
Claudio Ortolina 52815bde2f When doing markdown to HTML, sanitize HTML 
Closes #101
Closes #102
 2026-03-07 19:05:37 +00:00
Claudio Ortolina 84ffcc720b Run sobelow in skip mode 2026-03-07 18:57:18 +00:00
Claudio Ortolina 4a25e5742b Try and get Claude to skip the Co-Authored-By mention 2026-03-07 18:55:05 +00:00
Claudio Ortolina 3812b6c402 Add Content-Security-Policy header 
Closes #100
 2026-03-07 18:53:52 +00:00
Claudio Ortolina d3e1ecd10b Remove Sobelow TODOs 2026-03-07 18:39:38 +00:00
Claudio Ortolina 2e3732e38b Apply all necessary exclusions to sobelow findings 2026-03-07 18:37:24 +00:00
Claudio Ortolina c87f946479 Skip Sobelow Traversal.SendDownload warning for archive controller 2026-03-07 18:21:57 +00:00
Claudio Ortolina 2b09611fe9 Mark TODOs to change secrets in base configuration 2026-03-07 18:17:27 +00:00
Claudio Ortolina 27e5f68fbb Skip Sobelow XSS.ContentType warning for asset controller 2026-03-07 18:16:50 +00:00
Claudio Ortolina 72ab206135 Start configuring sobelow 2026-03-07 18:15:57 +00:00