medlogic
/
olivetin
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
1,429 Commits 1 Branch 0 Tags 12 MiB
Commit Graph

258 Commits

Author SHA1 Message Date
jamesread 8f6d53a029 chore: tweak reconnect login to avoid reconnect spam 2026-06-15 00:50:04 +01:00
jamesread 65ed5c1ff4 feat: more intelligent reconnect method 2026-06-15 00:10:07 +01:00
jamesread 9ac6acefd0 fix: emoji names regression, and webhook execution helper info 2026-06-01 00:29:48 +01:00
jamesread ebffd9f040 security: GHSA-prj9-97mp-mwh2 (HIGH) Treat all ot_ system arguments as reserved, preventing RCE 
Ensure OliveTin-owned arguments are injected only after filtering and validate system values before command execution.
 2026-05-31 22:44:40 +01:00
jamesread 1a7e44eb42 chore: dep update May 26th 2026 2026-05-26 00:44:15 +01:00
James Read e0eea9bc90
feat default icon cli hugeicon (#1036) 2026-05-26 00:37:58 +01:00
James Read ae928625a6
Merge branch 'next' into feat-default-icon-cli-hugeicon 2026-05-25 21:34:54 +01:00
jamesread 82f749a9ce feat: Default icon is now a CLI HugeIcon instead of a smiley face 2026-05-25 20:47:39 +01:00
jamesread b1c74c9e04 fmt: Cleanup coderabbit issues from action details change 2026-05-23 11:38:10 +01:00
jamesread cbed6d68c2 feat: Show exec conditions in the UI, and allow right clicking buttons for action details 2026-05-23 10:32:50 +01:00
James Read 437255e247
Merge commit from fork 
security: GHSA-f637-w7p2-m7fx (LOW) Validation endpoints allow argument enumeration
 2026-05-22 00:10:49 +01:00
jamesread a3865704c8 security: GHSA-f637-w7p2-m7fx (LOW) Validation endpoints allow argument enumeration 2026-05-22 00:08:47 +01:00
James Read 9ea01bbd0b
Merge commit from fork 
security: GHSA-7fq5-7wr8-rjwj (HIGH) Shared template instances could …
 2026-05-21 23:57:01 +01:00
jamesread d74da93140 security: GHSA-7fq5-7wr8-rjwj (HIGH) Shared template instances could cause command contamination 2026-05-21 23:51:17 +01:00
jamesread 6bd8c1e838 chore: allow case insensitive bearer 2026-05-21 23:12:49 +01:00
jamesread 246e33d565 feat: API Key (bearer) auth 2026-05-21 22:59:12 +01:00
jamesread fe68264c2b feat: popupOnStart history, and logs in reverse order on action details view 2026-05-19 23:19:42 +01:00
jamesread be1db222bb chore: dep update May 19 2026 2026-05-19 22:16:18 +01:00
jamesread 95a14c5aa5 chore: dep update 20260511 2026-05-11 09:08:45 +01:00
jamesread 196c5ccfc0 chore: dep update 20260510 2026-05-10 09:37:39 +01:00
jamesread 841ef770f3 chore: Dep update March 24th 2026-03-24 22:52:17 +00:00
jamesread cb3aa3362e chore: fix potential panic in tests 2026-03-11 00:29:56 +00:00
jamesread 606b705bdd chore: fix potential panic in tests 2026-03-11 00:27:42 +00:00
jamesread acd6cb839e security: GHSA-228v-wc5r-j8m7 (HIGH) Unauthorized Action Output Disclosure via EventStream 2026-03-10 23:47:35 +00:00
jamesread 86c35f40c3 chore: remove unneeded comment 2026-03-10 23:28:17 +00:00
jamesread bc5e9fbe1e security: GHSA-xx6g-43w2-9g6g (MODERATE) Email argument makes compliance harder, enables log injection 2026-03-10 23:27:09 +00:00
jamesread b33aded230 chore: Use a constant for the default CSP 2026-03-09 10:00:47 +00:00
jamesread b298a6bd8c chore: Treat root fieldset separately for ordering 2026-03-09 09:31:40 +00:00
jamesread dcb5bd0c82 chore: Allow entity key ordering for actionless components 2026-03-09 09:18:24 +00:00
jamesread 93a9636a82 chore: additional test coverage for view permission 2026-03-09 08:55:47 +00:00
jamesread 2f77000de4 security: GHSA-364q-w7vh-vhpc (HIGH) Unsafe parsing of UniqueTrackingId can be used to write files 2026-03-08 23:29:00 +00:00
jamesread 71bb999950 security: Actions that people didnt have permission to view were being returned (#921) 2026-03-08 22:45:46 +00:00
jamesread 5ff6b5d080 fix: Entity ordering (#886, #762) 2026-03-08 22:16:24 +00:00
jamesread 3f46007281 fix: Relax default CSP to allow iconify to work 2026-03-08 20:46:52 +00:00
jamesread b032ae5e5e chore: fix regression on arguments not being found 2026-03-05 08:29:30 +00:00
James Read 93d983c506
Merge branch 'next' into advisory-fix-1 2026-03-05 03:24:12 -05:00
jamesread d7962710e7 security: GHSA-jf73-858c-54pg (MODERATE) View permission not being checked when returning dashboards 2026-03-05 08:20:02 +00:00
jamesread 9080577f2b chore: potential crash in unit tests 2026-03-05 08:10:56 +00:00
James Read 5e0c052e68
Merge branch 'next' into advisory-fix-1 2026-03-04 19:16:07 -05:00
James Read 6202736d53
Merge commit from fork 
security: GHSA-p443-p7w5-2f7f (MODERATE) RestartAction always runs actions as guest
 2026-03-04 19:05:48 -05:00
jamesread cb46a597b2 security: GHSA-p443-p7w5-2f7f (MODERATE) RestartAction always runs actions as guest 2026-03-05 00:04:58 +00:00
James Read 32c7fd73b8
Merge commit from fork 
security: GHSA-gq2m-77hf-vwgh (MODERATE) Session Fixation: Logout Fails to Invalidate Server-Side Session
 2026-03-04 18:36:22 -05:00
jamesread d6a0abc375 security: GHSA-gq2m-77hf-vwgh (MODERATE) Session Fixation: Logout Fails to Invalidate Server-Side Session 2026-03-04 23:31:15 +00:00
jamesread e97d8ecbd8 security: GHSA-g962-2j28-3cg9 (HIGH) JWT Audience Validation Bypass in Local Key and HMAC Modes 2026-03-04 23:13:39 +00:00
jamesread 00cb5a2abf fix: action triggers were broken #914 2026-03-04 23:12:20 +00:00
jamesread 0c47564652 chore: logs are written with 0600 instead of 0644 2026-03-04 23:12:20 +00:00
jamesread bb14c5da3e security: (MED) GHSA-fwhj-785h-43hh Crash on NPE by calling APIs with invalid bindings or log references 2026-03-04 22:51:58 +00:00
jamesread 0412b9ea1d Merge branch 'next' of github.com:OliveTin/OliveTin into next 2026-03-02 00:35:05 +00:00
jamesread d9804182ea security: GHSA-4fqm-6fmh-82mq Authentication bypass in KillAction - thanks for the responsible disclosure @kule500 and making OliveTin better 2026-03-02 00:29:02 +00:00
James Read 58b0a7b8f6
Security remote crash in oauth2 (#910) 2026-03-01 19:14:36 -05:00