Miguel Ribeiro b75f13d0ff fix: harden oidc state validation and session rotation (#1071) ...

fix: account takeover via email-based account linking
fix: missing fields when cloning a subscription
fix: ssrf via oidc token/userInfo url configuration
fix: ssrf via test email notification
fix: zip slip path traversal in database restore writes files to webroot

2026-06-23 00:17:18 +08:00

..

i18n

add language Hungarian (#1072)

2026-05-27 21:42:43 +02:00

libs

feat: add 2fa support (#525)

2024-09-28 18:33:09 +02:00

admin.js

fix: harden oidc state validation and session rotation (#1071)

2026-06-23 00:17:18 +08:00

all.js

feat: convert wallos into a progressive web app (#151)

2024-02-26 22:53:04 +01:00

calendar.js

feat: enforce CSRF protection and POST-only policy across endpoints (#940)

2025-10-18 23:58:50 +02:00

common.js

fix: session expiration on pwa on android (#1023)

2026-03-21 18:05:59 +00:00

dashboard.js

update AI recommendation numbering after delete (#996)

2026-03-18 15:27:08 +00:00

login.js

fix: session expiration on pwa on android (#1023)

2026-03-21 18:05:59 +00:00

notifications.js

add serverchan notification (#951)

2025-12-20 15:06:49 +00:00

profile.js

fix: ssrf vulnerability on all test notifications endpoint

2026-03-05 23:13:51 +01:00

registration.js

validate oidc state parameter to prevent csrf login attack

2026-06-06 22:56:46 +02:00

settings.js

feat: add openai compatible host for ai recommendations

2026-03-23 16:24:26 +00:00

stats.js

fix: null array on empty subscription list

2026-05-17 00:54:14 +02:00

subscriptions.js

fix: null array on empty subscription list

2026-05-17 00:54:14 +02:00

theme.js

fix: session expiration on pwa on android (#1023)

2026-03-21 18:05:59 +00:00