Miguel Ribeiro e8a513591d fix: ssrf vulnerability on all test notifications endpoint ...

fix: xss vulnerability on password reset page
fix: vulnerability allowed to delete avatars from other users
chore: bump version

2026-03-05 23:13:51 +01:00

..

adduser.php

feat: enforce CSRF protection and POST-only policy across endpoints (#940)

2025-10-18 23:58:50 +02:00

deleteunusedlogos.php

feat: enforce CSRF protection and POST-only policy across endpoints (#940)

2025-10-18 23:58:50 +02:00

deleteuser.php

feat: enforce CSRF protection and POST-only policy across endpoints (#940)

2025-10-18 23:58:50 +02:00

enableoidc.php

feat: enforce CSRF protection and POST-only policy across endpoints (#940)

2025-10-18 23:58:50 +02:00

saveoidcsettings.php

feat: enforce CSRF protection and POST-only policy across endpoints (#940)

2025-10-18 23:58:50 +02:00

saveopenregistrations.php

feat: enforce CSRF protection and POST-only policy across endpoints (#940)

2025-10-18 23:58:50 +02:00

savesecuritysettings.php

fix: ssrf vulnerability on all test notifications endpoint

2026-03-05 23:13:51 +01:00

savesmtpsettings.php

feat: enforce CSRF protection and POST-only policy across endpoints (#940)

2025-10-18 23:58:50 +02:00

updatenotification.php

feat: enforce CSRF protection and POST-only policy across endpoints (#940)

2025-10-18 23:58:50 +02:00