Miguel Ribeiro e79f28be6b fix: ssrf vultenaribility on add subscription (#1038) ...

fix: only allow to use internal urls csrf validation bypass by admin user
fix: dns rebinding vulnerability

2026-04-18 16:57:46 +02:00

..

i18n

fix: remove extra line on languages.php causing headers already sent (#1019)

2026-03-19 01:12:42 +00:00

oidc

feat: add openai compatible host for ai recommendations

2026-03-23 16:24:26 +00:00

checkredirect.php

fix: redirect from dashboard to subscriptions for new users

2025-08-13 13:55:31 +02:00

checksession.php

fix: session expiration on pwa on android (#1023)

2026-03-21 18:05:59 +00:00

checkuser.php

feat: support automatic dark mode

2024-06-26 18:11:37 +02:00

connect_endpoint_crontabs.php

fix: import of translations for cronjobs was missing (#321)

2024-05-13 17:45:59 +02:00

connect_endpoint.php

fix: session expiration on pwa on android (#1023)

2026-03-21 18:05:59 +00:00

connect.php

Fix paths and tags

2023-11-14 21:16:32 +01:00

currency_formatter.php

Fix case when browser does not send HTTP_ACCEPT_LANGUAGE header

2023-12-08 21:44:46 +01:00

filters_menu.php

feat: add ukranian translation (#756)

2025-03-19 18:53:39 +00:00

footer.php

feat: add mobile menu navigation to experimental settings

2024-09-29 23:46:30 +02:00

getdbkeys.php

feat: only show filters that are actually used

2024-10-31 15:32:36 +01:00

getsettings.php

fix: typo on czech translation

2025-02-05 12:45:15 +01:00

header.php

fix: session expiration on pwa on android (#1023)

2026-03-21 18:05:59 +00:00

inputvalidation.php

feat: support automatic dark mode

2024-06-26 18:11:37 +02:00

list_subscriptions.php

fix: issue listing prices when uah was added to the list of currencies (#823)

2025-05-15 17:15:52 +02:00

sort_options.php

feat: add ukranian translation (#756)

2025-03-19 18:53:39 +00:00

ssrf_helper.php

fix: ssrf vultenaribility on add subscription (#1038)

2026-04-18 16:57:46 +02:00

stats_calculations.php

feat: add at a glance dashboard

2025-08-12 00:48:13 +02:00

validate_endpoint_admin.php

feat: enforce CSRF protection and POST-only policy across endpoints (#940)

2025-10-18 23:58:50 +02:00

validate_endpoint.php

feat: enforce CSRF protection and POST-only policy across endpoints (#940)

2025-10-18 23:58:50 +02:00

version.php

fix: ssrf vultenaribility on add subscription (#1038)

2026-04-18 16:57:46 +02:00