11 Commits (f7e9846c9b40a229813d19cdb66bf60fbe5e6a2a)

Author	SHA1	Message	Date
dgtlmoon	f7e9846c9b	CVE-2024-56509 - Stricter file protocol checking pre-check ( Improper Input Validation Leading to LFR/Path Traversal when fetching file:.. )	1 week ago
dgtlmoon	d297850539	Security - Fix test	2 months ago
dgtlmoon	751239250f	Security check - improve test	2 months ago
dgtlmoon	49bc982c69	CVE-2024-51998 - file:/ path traversal access should not be allowed to access a file without ALLOW_FILE_URI set	2 months ago
dgtlmoon	e756e0af5e	Fixing file:// file pickup - for change detection of local files (#2505)	6 months ago
dgtlmoon	8f3a6a42bc	Testing - Adding simple memory usage test (#2483)	6 months ago
dgtlmoon	c0f000b1d1	Merge pull request from GHSA-pwgc-w4x9-gw67 ... * Auto-escape was not enabled GHSA-pwgc-w4x9-gw67 * Auto-escape was not enabled because the filenames were not something jinja2 enables it for.	8 months ago
dgtlmoon	c8dcc072c8	Code refactor for fetchers (#1941)	1 year ago
dgtlmoon	52f2c00308	UI/Functionality - Ability to manage/apply filters and notifications across tags/groups	2 years ago
dgtlmoon	f8e587c415	Security - Possible stored XSS in watch list - Only permit HTTP/HTTP/FTP by default - override with env var `SAFE_PROTOCOL_REGEX` (#1359)	2 years ago
dgtlmoon	f2fa638480	Security update - Protect against file:/// type access by webdriver/chrome. (#483)	3 years ago