With these two properties, it is hard for third party to utilize API
to move torrents without retrieving torrent details first.
Plus, client-supplied paths and filenames can lead to arbitrary file
system access which is a security issue.
In conclusion, it doesn't make sense to let client to provide these
two properties.
Thus we shall not use path.join(). Or NodeJS will helpfully convert
the paths to Windows format if we are on Windows and as a result,
breaks everything.
Fixes: fee968525, 8f4fb88ac
This allows us to be dependency-free in production.
Caveats:
- NCC can't handle WASM. Thus, we have to remove WASM files inside
argon2-browser before build to force JS.
- Duplicate geoip databases inside dist/data and dist. We have to
remove dist/data after build.
This change uses the best-effort approach to update dependencies.
Changelogs of each dependency have been manually reviewed and all
dependency that doesn't *actually* have BREAKING changes or have
minimal changes are bumped to their latest versions.
In most cases, the maintainers of those dependencies don't actually
understand semvar and inappropriately bumped major version for trivial,
non-breaking changes. In other cases, the minimum supported Node version
is upgraded, which is indeed breaking but that's not a concern for this
project as a recent Node version is always expected. Or, the dependency
does have certain breaking changes but those changes are not relevant to
functions used by this project.
Also bumped versions of dependencies if only minimal changes are required:
* autoprefixer: transform from "browsers" property to browserslist
* prettier: reformated sources after update
Signed-off-by: Jesse Chan <jc@linux.com>
* Show disk usage in sidebar (#308)
* Clean up
* Fix linting, DiskUsageService as singleton
* node 8
* missing scope
* prettier
* Tooltip prefer top position
* tweaky
* Configure diskUsageSerivce.watchMountPoints option
- filters mountpoints to include in the sidebar
- omitting this field gives all mounted filesystems
* use connectStores
* activity stream unsubscribe from events on res 'close' event
* remove nbsp; use css
* prettier format
* Return empty array on win32 and darwin platforms
* Use 1K blocks, add (untested) macos support
* prettier
* config.template typo
* rename var fs -> mountpoint
* Filter wrong output, use df -l in macos
- macos df return map -hosts and map auto_home in the first column
which breaks splitting in awk. They are anyway not real
* Changed my mind about filter. just -l
* Apply jfurrow's patch
* Remove unnecessary defaultProp
* Use FormattedMessage
* Fix formatting
* Switch to airbnb's eslint
* Applies automatic fixes
* Clean up dependencies
* New lint rules
* Apply auto fixes
* Prettier
* Update prettier position in eslint config
* Aligns prettier and eslint
* Use partial configs for client and server directories
* Finalizes eslint config (for now)
* Applies all elsint fixes
* Removes duplciated config
* Fixes build & local dev
* Fix CI build
