Miguel Ribeiro e8a513591d fix: ssrf vulnerability on all test notifications endpoint ...

fix: xss vulnerability on password reset page
fix: vulnerability allowed to delete avatars from other users
chore: bump version

2026-03-05 23:13:51 +01:00

..

i18n

Added catalan translation (#960)

2025-12-20 15:01:33 +00:00

libs

feat: add 2fa support (#525)

2024-09-28 18:33:09 +02:00

admin.js

fix: ssrf vulnerability on all test notifications endpoint

2026-03-05 23:13:51 +01:00

all.js

feat: convert wallos into a progressive web app (#151)

2024-02-26 22:53:04 +01:00

calendar.js

feat: enforce CSRF protection and POST-only policy across endpoints (#940)

2025-10-18 23:58:50 +02:00

common.js

feat: add hint for mobile swipe action (#608)

2024-11-03 20:12:01 +01:00

dashboard.js

feat: enforce CSRF protection and POST-only policy across endpoints (#940)

2025-10-18 23:58:50 +02:00

login.js

feat: add mobile menu navigation to experimental settings

2024-09-29 23:46:30 +02:00

notifications.js

add serverchan notification (#951)

2025-12-20 15:06:49 +00:00

profile.js

fix: ssrf vulnerability on all test notifications endpoint

2026-03-05 23:13:51 +01:00

registration.js

feat: add indonesian language (#842)

2025-06-08 18:52:21 +02:00

settings.js

feat: enforce CSRF protection and POST-only policy across endpoints (#940)

2025-10-18 23:58:50 +02:00

stats.js

fix: xss security vulnerability with the avatar selection

2024-12-21 00:22:21 +00:00

subscriptions.js

feat: enforce CSRF protection and POST-only policy across endpoints (#940)

2025-10-18 23:58:50 +02:00

theme.js

feat: enforce CSRF protection and POST-only policy across endpoints (#940)

2025-10-18 23:58:50 +02:00