Miguel Ribeiro e79f28be6b fix: ssrf vultenaribility on add subscription (#1038) ...

fix: only allow to use internal urls csrf validation bypass by admin user
fix: dns rebinding vulnerability

2026-04-18 16:57:46 +02:00

..

add.php

fix: ssrf vultenaribility on add subscription (#1038)

2026-04-18 16:57:46 +02:00

clone.php

feat: enforce CSRF protection and POST-only policy across endpoints (#940)

2025-10-18 23:58:50 +02:00

delete.php

feat: enforce CSRF protection and POST-only policy across endpoints (#940)

2025-10-18 23:58:50 +02:00

exportcalendar.php

use stable UID for iCal events to prevent duplicates (#966)

2025-12-20 15:04:41 +00:00

get.php

feat: add some leeway for totp codes

2024-11-17 16:27:48 +01:00

getcalendar.php

fix: allow usernames with capital letters

2024-07-29 13:57:20 +02:00

renew.php

feat: enforce CSRF protection and POST-only policy across endpoints (#940)

2025-10-18 23:58:50 +02:00