qBittorrent

Recent Commits

• Chocobo1 (28 Jul 26)

  Detect redundant quotes from Python executable path `placeholder()` and `setPlaceholder()` should take a `QString` rather than a `Path` since the UI placeholder should not be restricted to only paths. Closes #24169. PR #24740.

• Vladimir Golovnev (28 Jul 26)

  WebAPI: Do not set cookies for API key based web session PR #24748.

• Chocobo1 (27 Jul 26)

  Align 'Share Limits Mode' UI elements PR #24736.

• Chocobo1 (27 Jul 26)

  Add 'Resize columns' action to 'Torrent Content Layout' dialog header PR #24735.

• Chocobo1 (27 Jul 26)

  Add unit tests for 'find root folder' method Assert that only relative paths are accepted, as absolute paths are not supported currently. PR #24738.

• Chocobo1 (27 Jul 26)

  Add logging of IP ban alerts This alert is available since libtorrent 2.1.1. Upstream PR: https://github.com/arvidn/libtorrent/pull/8574. PR #24734.

• RealFakeAccount (27 Jul 26)

  WebUI: escape add-torrent window title `createAddTorrentWindow()` in `client.js` passes title into a `MochaUI.Window`, which renders it via `.set("html", …)` (innerHTML). That title comes from attacker-influenced sources — search-result names, RSS article names, dropped URLs, torrent filenames — so markup in a name is parsed as HTML, and the default WebUI CSP (`script-src 'self' 'unsafe-inline'`) lets inline handlers run in the authenticated origin. **Fix:** escape at the sink with the existing `Misc.escapeHtml()` helper. PR #24726.

• Mark Yu (27 Jul 26)

  WebUI: do not select invisible rows in `dynamicTable.js ` When doing a batch select using Shift key. Do not select invisible rows. Closes #24718. PR #24725.

• Vladimir Golovnev (25 Jul 26)

  Revamp .torrent files backup management PR #24641.

• database64128 (25 Jul 26)

  Align default `DiskQueueSize` with libtorrent 2.1 https://github.com/arvidn/libtorrent/commit/5abab0509caca297e8849c8d4406bfdb04b60a42 changed the default max_queued_disk_bytes from 1 MiB to 100 MiB. PR #24711.

• Mark Yu (25 Jul 26)

  WebUI: Handle non-torrent RSS link Handle case when attempting to add a invalid torrent from a RSS link via WebUI. A user can add a RSS url that doesn't contain valid torrent links, for example: https://fosstorrents.com/feed/rss.xml The desktop can handle it properly by prompting an alert. The WebUI cannot handle the error and will constantly call fetchMetadata api for the given url until the add torrent dialog is closed. The Add Torrent Dialog will also keep saying Retrieving Metadata... giving the user false hope since it will NEVER resolve since the url is not a valid torrent. At the same time, the backend will continuously download the file, keep on failing and will keep logging this error on the Logs tab. This PR keeps a cache of invalid URL and would alert the user if the RSS link they are trying to download is invalid. Also pops and alert saying that url is not a valid torrent file. Related: #24685. PR: #24692.

• cybercat39-droid (25 Jul 26)

  NSIS: Update Thai translation PR #24673.

• Mark Yu (25 Jul 26)

  Remove FOSSHub site for program updates It seems that Fosshub has dropped RSS support: https://www.fosshub.com/feed/5b8793a7f9ee5a5c3e97a3b2.xml now returns a 404 error. This PR removes the Fosshub RSS check when checking for program updates. Closes #24528. PR #24611.

• Chocobo1 (20 Jul 26)

  WebUI: suppress errors when clicking on column headers PR #24710.

• Chocobo1 (20 Jul 26)

  GHA CI: allow `npm` to install dependencies from URLs This change is required since `npm` v12 the option will default to `none` and qbt do have one dependency that is from remote URL. Note that the `root` option only allow *direct* dependencies to be installed from remote URLs. https://docs.npmjs.com/cli/v12/using-npm/config#allow-remote PR #24709.

• Chocobo1 (20 Jul 26)

  WebUI: Use enable/disable on torrent content menu items It allows the actions (Copy URL, Download) to be discovered more easily. Additional changes: * Rename "Copy URL" menu entry to "Copy download URL". * Allow 'Download' and 'Copy download URL' actions on multiple selected files. Previously these actions are only available when only one file is selected. PR #24708.

• Chocobo1 (20 Jul 26)

  Add button to open Default Apps settings on Windows Note that Windows 11 calls it 'Default Apps' not 'Default programs'. Also I took the liberty of cleaning up surrounding code. PR #24707.

• Chocobo1 (20 Jul 26)

  Update `expected-lite` to version `0.10.0` (#24705) https://github.com/nonstd-lite/expected-lite/releases/tag/v0.10.0 More `std::expected` implementations now mark it as `[[nodiscard]]` so qbt must ignore it explicitly. See: https://www.reddit.com/r/cpp/comments/1h9u4us/should_stdexpected_be_nodiscard/ Closes #23562.

• Mark Yu (20 Jul 26)

  WebUI: Change `ServerPathSeparator` to be a getter function PR #24694.

• AgentCent (19 Jul 26)

  Make Torrent Options dialog scrollable PR #24644. Closes #24622.

• lzhzh1 (19 Jul 26)

  Add allow_multiple_connections_per_pid advanced setting PR #24684.

• Vladimir Golovnev (19 Jul 26)

  Construct WebAPI controller instances on demand PR #24700.

• Vladimir Golovnev (19 Jul 26)

  Allow to edit common path of torrent content items PR #24691.

• Arisa Snowbell (18 Jul 26)

  Fix P2P filter parsing for IPv6 Cause IPv6 contains ':' current parsing strategy was not capable of handling it. Closes #20970. PR #24680.

• Vladimir Golovnev (15 Jul 26)

  Update Changelog PR #24690.

• Vladimir Golovnev (14 Jul 26)

  Properly handle relative path of logs folder * Properly handle relative path of logs folder * Show resolved path in PathEdit tooltip PR #24671. Closes #17321.

• Andy Ye (14 Jul 26)

  Avoid failed add result after tracker merge PR #24605. Closes #23810.

• Evgeny Vrublevsky (14 Jul 26)

  Resolve relative UI theme paths from the profile base path PR #24658.

• Vladimir Golovnev (14 Jul 26)

  Fix redefined signal PR #24679.

• Vladimir Golovnev (14 Jul 26)

  Don't try to load plugins config if no plugins are loaded PR #24682.