14e613e708
build(deps): update pytesseract requirement from >=0.3.10 to >=0.3.13
...
Updates the requirements on [pytesseract](https://github.com/madmaze/pytesseract ) to permit the latest version.
- [Release notes](https://github.com/madmaze/pytesseract/releases )
- [Commits](https://github.com/madmaze/pytesseract/compare/v0.3.10...v0.3.13 )
---
updated-dependencies:
- dependency-name: pytesseract
dependency-version: 0.3.13
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-31 23:06:00 +00:00
76d473d731
chore(release): update build metadata files [skip ci]
2026-05-31 04:36:20 +00:00
7653c2f7ad
0.173.3
...
Automatically generated by python-semantic-release
2026-05-31 04:36:17 +00:00
90844fe9ad
Merge pull request #901 from christianlouis/sentinel-fix-xss-search-14130401506656403756
...
🛡️ Sentinel: [HIGH] Fix XSS vulnerability in search.html escapeHtml
2026-05-31 06:35:57 +02:00
37c27c0213
fix: preserve falsy values in escapeHtml
2026-05-31 05:38:41 +02:00
0cf8108ff0
🛡️ Sentinel: [HIGH] Fix XSS vulnerability in search.html escapeHtml
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-05-31 03:03:31 +00:00
cc561277c9
docs(changelog): update changelog [skip ci]
2026-05-31 00:34:00 +00:00
4b87868122
Fix date usage counts for Postgres
2026-05-31 02:33:38 +02:00
948d118926
docs(changelog): update changelog [skip ci]
2026-05-30 23:50:35 +00:00
4b7b9fd5b6
Add Postgres driver for main deployments
2026-05-31 01:50:07 +02:00
65bd6d71d0
docs(changelog): update changelog [skip ci]
2026-05-30 05:37:26 +00:00
00ec6888c5
🛡️ Sentinel: [HIGH] Fix DOM-based XSS in upload.js ( #900 )
...
* 🛡️ Sentinel: [HIGH] Fix DOM-based XSS in upload.js
Added `_escapeHtml` function to sanitize user-controlled `file.name` before interpolating it into the `row.innerHTML` payload, preventing malicious file names from executing XSS during uploads.
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
* Tighten XSS fix PR payload
---------
Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
Co-authored-by: Christian Krakau-Louis <christian@Christians-Mac-mini-7.local >
2026-05-30 07:36:58 +02:00
6e4824cb74
chore(release): update build metadata files [skip ci]
2026-05-23 00:38:18 +00:00
f1b55de6bc
0.173.2
...
Automatically generated by python-semantic-release
2026-05-23 00:38:15 +00:00
6fc00b8de1
fix: resolve dependabot npm alerts
2026-05-23 02:37:54 +02:00
427db102d8
docs(changelog): update changelog [skip ci]
2026-05-23 00:30:19 +00:00
e46f9b9a21
docs: extend product roadmap and milestones
2026-05-23 02:29:46 +02:00
10a6c6255a
chore(release): update build metadata files [skip ci]
2026-05-22 20:11:53 +00:00
77d184efd8
0.173.1
...
Automatically generated by python-semantic-release
2026-05-22 20:11:49 +00:00
1ca7f562ef
fix: register Evernote task settings
2026-05-22 22:11:26 +02:00
3bccbf883d
chore(release): update build metadata files [skip ci]
2026-05-22 10:14:16 +00:00
b788b553c0
0.173.0
...
Automatically generated by python-semantic-release
2026-05-22 10:14:12 +00:00
4b46c4baf8
feat(storage): add Evernote destination ( #862 )
...
* feat(storage): add Evernote destination
* style: apply ruff auto-fix
- Auto-formatted code with ruff format
- Applied ruff linting fixes with --fix
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
---------
Co-authored-by: Christian Krakau-Louis <christian@Christians-Mac-mini-7.local >
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-05-22 12:13:46 +02:00
8e744c076d
chore(release): update build metadata files [skip ci]
2026-05-17 14:20:12 +00:00
cc494c6937
0.172.12
...
Automatically generated by python-semantic-release
2026-05-17 14:20:08 +00:00
e2fa96318f
🛡️ Sentinel: [HIGH] Fix SSRF in webhook delivery ( #846 )
...
* fix: validate webhook targets before delivery
* test: cover webhook SSRF validation
2026-05-17 16:19:41 +02:00
416c3c4758
chore(release): update build metadata files [skip ci]
2026-05-17 14:07:02 +00:00
1c7ef28c5d
0.172.11
...
Automatically generated by python-semantic-release
2026-05-17 14:06:59 +00:00
1a0218799b
fix: escape search result template values ( #853 )
2026-05-17 16:06:39 +02:00
048f28a671
docs(changelog): update changelog [skip ci]
2026-05-17 13:45:16 +00:00
b818f07c80
Update setuptools build requirement ( #847 )
...
Co-authored-by: Christian Krakau-Louis <christianlouis@gmail.com >
2026-05-17 15:44:52 +02:00
06507ed8bf
chore(release): update build metadata files [skip ci]
2026-05-17 12:40:24 +00:00
044a9a86d6
0.172.10
...
Automatically generated by python-semantic-release
2026-05-17 12:40:21 +00:00
62d4ca6367
Merge pull request #860 from christianlouis/fix-httpx-asyncclient-syntax-error-15225710494108486471
...
Fix SyntaxError caused by duplicate `event_hooks` in `httpx.AsyncClient` instantiation
2026-05-17 14:39:59 +02:00
871f788f0b
fix(url-upload): handle unsafe redirects as client errors
2026-05-17 13:12:55 +02:00
18f5596b01
Fix SyntaxError caused by duplicate event_hooks in httpx.AsyncClient instantiation
...
Combined duplicated `event_hooks` keyword arguments into a single dictionary parameter with both `validate_redirect` and `verify_redirect` in `app/api/url_upload.py`. This fixes a `SyntaxError: keyword argument repeated: event_hooks` and ensures that all redirect validations run.
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-05-17 03:01:11 +00:00
afb8b367ee
Fix SyntaxError caused by duplicate event_hooks in httpx.AsyncClient instantiation
...
Combined duplicated `event_hooks` keyword arguments into a single dictionary parameter with both `validate_redirect` and `verify_redirect` in `app/api/url_upload.py`. This fixes a `SyntaxError: keyword argument repeated: event_hooks` and ensures that all redirect validations run.
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-05-17 02:58:26 +00:00
58b14ae769
docs(changelog): update changelog [skip ci]
2026-04-07 09:35:53 +00:00
23c5bac666
Merge pull request #838 from christianlouis/dependabot/pip/pip-licenses-5.5.5
...
Bump pip-licenses from 5.5.1 to 5.5.5
2026-04-07 11:35:15 +02:00
d925dc5cd3
Merge pull request #839 from christianlouis/dependabot/pip/stripe-gte-7.0.0-and-lt-16.0.0
...
Update stripe requirement from <15.0.0,>=7.0.0 to >=7.0.0,<16.0.0
2026-04-07 11:35:04 +02:00
b8ddd2f8d2
chore(release): update build metadata files [skip ci]
2026-04-07 09:34:57 +00:00
301ca9d186
0.172.9
...
Automatically generated by python-semantic-release
2026-04-07 09:34:54 +00:00
3bd8a52ea2
Merge pull request #836 from christianlouis/sentinel/fix-s3-ssrf-vulnerability-8738702433604673313
...
🛡️ Sentinel: [HIGH] Fix SSRF in S3 connection test endpoint_url
2026-04-07 11:34:28 +02:00
789e8c6236
Merge pull request #840 from christianlouis/sentinel/ssrf-redirect-bypass-15997970627137004397
...
🛡️ Sentinel: [HIGH] Fix SSRF bypass via HTTP redirects in url_upload
2026-04-07 11:34:11 +02:00
a3ea215a1c
Merge branch 'main' into sentinel/ssrf-redirect-bypass-15997970627137004397
2026-04-07 11:33:59 +02:00
c6e0b80bec
docs(changelog): update changelog [skip ci]
2026-04-07 09:33:42 +00:00
e86e1b9f13
Merge pull request #845 from christianlouis/sentinel-ssrf-httpx-redirect-fix-3175117423198883580
...
🛡️ Sentinel: [HIGH] Fix SSRF bypass via httpx redirects in /process-url
2026-04-07 11:33:11 +02:00
46a9a30af0
🛡️ Sentinel: [HIGH] Fix SSRF bypass via httpx redirects
...
🚨 Severity: HIGH
💡 Vulnerability: The `/process-url` endpoint used `httpx.AsyncClient` with `follow_redirects=True`. While the initial user-provided URL was validated against SSRF protections (blocking private/internal IPs), the client implicitly followed subsequent HTTP redirects without validating their target locations. This allowed an attacker to bypass the initial check by supplying a valid URL that redirected to an internal IP or cloud metadata endpoint.
🎯 Impact: An attacker could potentially access internal network services or cloud metadata endpoints.
🔧 Fix: Implemented an `event_hooks` listener (`validate_redirect`) on the `httpx.AsyncClient` that intercepts responses, extracts the `Location` header, resolves the absolute target URL, and applies the same `validate_url_safety` check before allowing the redirect to be followed.
✅ Verification: Ran `pytest tests/test_url_upload.py`, formatting checks via `ruff format` and linting via `ruff check`.
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-04-06 02:55:58 +00:00
bdfa3ba1e0
style: sort imports in test_url_upload.py
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-30 03:31:23 +00:00
8295279ec9
style: apply ruff auto-fix
...
- Auto-formatted code with ruff format
- Applied ruff linting fixes with --fix
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-03-30 03:24:20 +00:00
dependabot[bot]