ben/Open-Streaming
Watch
1
0
Fork
You've already forked Open-Streaming
 0
Code Issues Pull requests Projects Releases 7 Packages Wiki Activity Actions
7 releases 7 tags
  • v1.1.0 10f395df13

    v1.1.0 Stable

    ben released this 2026-07-15 10:25:45 -07:00 | 4 commits to main since this release

    Fixed Security Vulnerabilities:

    Critical - XSS (cross-site scripting)

    createServiceEl built tiles with innerHTML and unescaped label/img/url. A config with a label like would run arbitrary JavaScript. Rewrote it entirely using createElement/textContent/setAttribute so nothing is ever interpreted as HTML.
    The edit path had the same hole via fallback.outerHTML — now rebuilds the tile safely.

    High - unsafe URLs

    openService set window.location.href to any string, so a javascript: URL would execute. Added isSafeUrl() which only allows http:/https:.
    Custom service inputs now validate the URL and image on entry.

    High - unvalidated import

    Import wrote raw JSON straight to localStorage. Now every field is validated: services are filtered and sanitized, URLs/images checked, theme/size/mode values checked against allowlists, custom theme colors must be valid hex, and there's a 5MB file cap.

    Medium - CSS injection & file validation

    Background image URL now rejects quotes/parens that could break out of url('...').
    Image upload validates the MIME type is actually an image and caps size at 5MB.

    Fixed UI issues when running on screens smaller than 1920x1080.

    Downloads
  • v1.0.9 23c7adeb33

    v1.0.9 Stable

    ben released this 2026-07-01 10:19:13 -07:00 | 6 commits to main since this release

    Fixed service tile button layout (edit,dupe,text). Buttons will always appear at bottom left if service text is hidden and will always appear just above if text is shown for both aspect ratios.

    Changed 'add a service' tile opacity to %35 and changed colors so that it's more visible when a custom image is set as the background.

    Added the ability to create, modify or delete custom themes.

    Config export/import now pulls all settings, including custom background images etc.

    Downloads
  • v1.0.8 a3131c21b1

    v1.0.8 Stable

    ben released this 2026-06-28 14:09:06 -07:00 | 13 commits to main since this release

    More UI Improvements

    Can now:
    - Edit Service Tiles
    - Duplicate Service Tiles
    - Set Custom Backgrounds (Color picker, image file upload, image url)
    - Specify app-wide Font (Based on existing system fonts)
    - Change text on tile labels, or hide them completely
    - Changes persist consistently between app relaunches
    - Nav-bar also displays current time.

    Downloads
  • v1.0.7 b19fcf85d4

    v1.0.7 - Performance Improvements Stable

    ben released this 2026-06-28 10:16:50 -07:00 | 22 commits to main since this release

    1. Added: show: false + mainWindow.show() on did-finish-load. Prevents the white flash you get on startup before the page renders

    2. Added: backgroundThrottling: false. Stops Electron from throttling timers and animations when the window isn't focused, which can cause sluggishness when switching back to the app

    3. Throttled mousemove. The nav bar trigger now only checks position every 100ms instead of on every single pixel of mouse movement, which reduces CPU overhead, especially noticeable on sites with lots of animations like Spotify.

    Downloads
  • v1.0.6 d426dc08f7

    v1.0.6 Stable

    ben released this 2026-05-28 20:56:10 -07:00 | 29 commits to main since this release

    Re-built using NPM 42.3.0. Updated Chrome version to 132. Now strips CSP headers for local URLs (Emby, Jellyfin, etc...).

    Downloads
  • v1.0.5 5acf6ce860

    v1.0.5 Stable

    ben released this 2026-05-24 12:39:56 -07:00 | 35 commits to main since this release

    New Platform Release: Windows

    Changes to HTML:

    • Service images are now referenced via the URL from Git repo's /assets folder instead of having to be locally available.
    • Popular services list is no longer hard-coded into HTML. Instead the services.json file in /src/branch/main is now referenced when populating the list.
      • Hard-coded array still exists in HTML as a fallback
      • Popular services drop-down now sorted alphabetically
    Downloads
  • v.1.0.4 37cc8868fc

    v.1.0.4 Stable

    ben released this 2026-05-22 15:16:12 -07:00 | 43 commits to main since this release

    Nav-bar is actually fixed now. Various Visual Tweaks. Latest
    HTML Changes:

    Various visual changes. Sidebar is gone, moved everything to static location at top so that tiles don't get obscured by the clock.
    Re-designed logo.

    .JS Changes:

    Added Preload.js to handle fullscreen toggle.

    Actually fixed nav-bar this time. Switched to addEventListener instead of onclick (for CSP). Sites like Spotify and Apple+ block 'onclick', so nav-bar became unusable once you navigated to the

    Downloads