Default Branch

65bd6d71d0 · docs(changelog): update changelog [skip ci] · Updated 2026-05-30 05:37:26 +00:00

Branches

5f530a28b3 · Fix DOM-based XSS in upload.js by sanitizing file.name · Updated 2026-05-29 03:02:29 +00:00

18
1

35039c8463 · 🛡️ Sentinel: [HIGH] Fix DOM-based XSS in file upload · Updated 2026-05-28 03:10:12 +00:00

18
2

16449e75a2 · Clarify DOM XSS example in sentinel note · Updated 2026-05-27 05:11:06 +00:00

18
4

5b41d32f90 · 🛡️ Sentinel: [HIGH] Fix Server-Side Request Forgery in webhooks · Updated 2026-05-17 15:04:09 +00:00

43
1

46ab0ad8e2 · fix: resolve ssrf verification issue and xss in frontend · Updated 2026-05-17 14:32:51 +00:00

43
1

8e744c076d · chore(release): update build metadata files [skip ci] · Updated 2026-05-17 14:20:12 +00:00

29
0
Included

e9595c7868 · Add missing test coverage for validate_redirect event hook · Updated 2026-05-17 13:51:29 +00:00

43
1

55f3eaf4b3 · Fix SyntaxError caused by repeated keyword argument event_hooks in httpx.AsyncClient initialization in URL upload. Combine both local and global redirect validators into a single list to maintain full SSRF protection. · Updated 2026-05-17 13:42:34 +00:00

43
1

c5c5284bd0 · 🛡️ Sentinel: [HIGH] Fix SSRF bypass via HTTP redirects in URL upload · Updated 2026-05-17 13:37:55 +00:00

64
1

241e57e220 · 🛡️ Sentinel: [CRITICAL] Fix SSRF bypass via unvalidated redirects · Updated 2026-05-17 13:37:30 +00:00

43
1

2979302839 · Acknowledge obsolete PR · Updated 2026-05-17 13:36:52 +00:00

43
1

afff66a089 · 🛡️ Sentinel: Add test to fix missing coverage on httpx.AsyncClient initialization · Updated 2026-05-17 13:01:16 +00:00

37
8

10df0b21bf · 🧪 Extract and complete tests for saved searches API · Updated 2026-03-23 16:31:34 +00:00

760
1

1fd3e745cf · Fix failing dependencies check due to temporary issue · Updated 2026-03-23 16:29:22 +00:00

185
1

ffc456ef75 · Merge pull request #821 from christianlouis/copilot/sub-pr-816 · Updated 2026-03-23 16:25:53 +00:00

760
4

16de54f66b · 🧹 [code health] Remove unused TokenRevokeRequest model · Updated 2026-03-23 14:27:10 +00:00

185
1

0c7ea6748d · fix: social login providers now work from DB config without restart · Updated 2026-03-22 18:42:18 +00:00

197
0
Included

425472c839 · fix(ui): add missing opening script tag in base.html Sentry block · Updated 2026-03-22 17:42:54 +00:00

202
0
Included

7d6128d78f · fix(api): add PUT /api/settings/{key} endpoint and shared credentials for Google/Microsoft social login · Updated 2026-03-22 15:13:16 +00:00

233
0
Included

07a79890af · Initial plan · Updated 2026-03-13 11:27:40 +00:00

1033
1