7 Commits

Author	SHA1	Message	Date
Miguel Ribeiro	b75f13d0ff	fix: harden oidc state validation and session rotation (#1071) ... fix: account takeover via email-based account linking fix: missing fields when cloning a subscription fix: ssrf via oidc token/userInfo url configuration fix: ssrf via test email notification fix: zip slip path traversal in database restore writes files to webroot	2026-06-23 00:17:18 +08:00
Miguel Ribeiro	3247ce2c87	feat: enforce CSRF protection and POST-only policy across endpoints (#940)	2025-10-18 23:58:50 +02:00
Miguel Ribeiro	6e44a26703	feat: add some leeway for totp codes ... feat: add start date to subscriptions feat: add option for manual/automatic renewals fix: layout issue with subscriptions list during search	2024-11-17 16:27:48 +01:00
Miguel Ribeiro	5c92528808	feat: replacement for disabled subscriptions, to more accurately calculate savings	2024-10-29 18:26:07 +01:00
Miguel Ribeiro	fed0192394	feat: select multiple filters on the dashboard ... feat: add multi email recipients feat: add option for also showing the original price on the dashboard feat: open edit form after cloning subscription fix: typo on export subscriptions to csv chore: removed version line from docker-compose file	2024-09-01 22:19:06 +02:00
Miguel Ribeiro	c393146d9e	feat: add cancelation reminders (#425)	2024-07-05 19:07:15 +02:00
Miguel Ribeiro	8304ed7b54	feat: edit and delete options now available directly on the subscription list ... fix: typo on webhook payload refactor: split currency endpoint feat: add option to clone subscription	2024-06-21 02:00:27 +02:00