jamesread
|
65ed5c1ff4
|
feat: more intelligent reconnect method
|
2026-06-15 00:10:07 +01:00 |
|
James Read
|
437255e247
|
Merge commit from fork
security: GHSA-f637-w7p2-m7fx (LOW) Validation endpoints allow argument enumeration
|
2026-05-22 00:10:49 +01:00 |
|
jamesread
|
a3865704c8
|
security: GHSA-f637-w7p2-m7fx (LOW) Validation endpoints allow argument enumeration
|
2026-05-22 00:08:47 +01:00 |
|
jamesread
|
246e33d565
|
feat: API Key (bearer) auth
|
2026-05-21 22:59:12 +01:00 |
|
jamesread
|
fe68264c2b
|
feat: popupOnStart history, and logs in reverse order on action details view
|
2026-05-19 23:19:42 +01:00 |
|
jamesread
|
acd6cb839e
|
security: GHSA-228v-wc5r-j8m7 (HIGH) Unauthorized Action Output Disclosure via EventStream
|
2026-03-10 23:47:35 +00:00 |
|
jamesread
|
b032ae5e5e
|
chore: fix regression on arguments not being found
|
2026-03-05 08:29:30 +00:00 |
|
James Read
|
93d983c506
|
Merge branch 'next' into advisory-fix-1
|
2026-03-05 03:24:12 -05:00 |
|
jamesread
|
d7962710e7
|
security: GHSA-jf73-858c-54pg (MODERATE) View permission not being checked when returning dashboards
|
2026-03-05 08:20:02 +00:00 |
|
James Read
|
5e0c052e68
|
Merge branch 'next' into advisory-fix-1
|
2026-03-04 19:16:07 -05:00 |
|
James Read
|
6202736d53
|
Merge commit from fork
security: GHSA-p443-p7w5-2f7f (MODERATE) RestartAction always runs actions as guest
|
2026-03-04 19:05:48 -05:00 |
|
jamesread
|
cb46a597b2
|
security: GHSA-p443-p7w5-2f7f (MODERATE) RestartAction always runs actions as guest
|
2026-03-05 00:04:58 +00:00 |
|
jamesread
|
d6a0abc375
|
security: GHSA-gq2m-77hf-vwgh (MODERATE) Session Fixation: Logout Fails to Invalidate Server-Side Session
|
2026-03-04 23:31:15 +00:00 |
|
jamesread
|
bb14c5da3e
|
security: (MED) GHSA-fwhj-785h-43hh Crash on NPE by calling APIs with invalid bindings or log references
|
2026-03-04 22:51:58 +00:00 |
|
jamesread
|
aa2bd95ccb
|
feat(policy): add policy to show/hide version number
Made-with: Cursor
|
2026-02-27 21:26:55 +00:00 |
|
jamesread
|
54eb2a6586
|
fix: User login log message fixed when password matches, but user lookup fails
|
2026-02-27 00:10:45 +00:00 |
|
jamesread
|
03da2ff2e7
|
security: Try to set cookies secure, with force override option
|
2026-02-26 23:43:50 +00:00 |
|
jamesread
|
4744169aa0
|
chore: code cleanup, remove todos, etc
|
2026-02-26 23:07:07 +00:00 |
|
jamesread
|
e9a3863b1b
|
chore: codestyle
|
2026-02-26 20:56:51 +00:00 |
|
jamesread
|
4af4d516be
|
fix: ShowDiagnostics now behind policy checks
|
2026-02-26 20:43:14 +00:00 |
|
jamesread
|
24cced0c8c
|
security: IDOR on ExecutionStatus API
|
2026-02-26 20:23:48 +00:00 |
|
jamesread
|
a7be68b359
|
security: 10-slot Semaphore around password hash functions to prevent resource exhaustion attacks
|
2026-02-26 16:49:29 +00:00 |
|
jamesread
|
1335302e80
|
chore: codestyle
|
2026-02-26 00:48:21 +00:00 |
|
jamesread
|
ea4cdf9df2
|
fix: Logs page pagination (#883)
|
2026-02-19 20:33:51 +00:00 |
|
jamesread
|
1248ee8765
|
chore: remove extranious comments
|
2026-02-13 23:36:16 +00:00 |
|
James Read
|
54080efdf3
|
Fix move tpl to global (#848)
|
2026-01-26 11:33:36 +00:00 |
|
jamesread
|
561cd9c431
|
fix: Various coderabbit suggestions on tpl ext
|
2026-01-26 00:46:17 +00:00 |
|
jamesread
|
0e0bbd3fdb
|
fix: Nil binding on entity logs caused a NPE
|
2026-01-26 00:34:39 +00:00 |
|
James Read
|
cf00d179bf
|
Merge branch 'next' into fix-move-tpl-to-global
|
2026-01-25 22:53:02 +00:00 |
|
jamesread
|
e807cb5231
|
feat: configuration options for navigate-on-start icons
|
2026-01-25 21:50:03 +00:00 |
|
jamesread
|
b37f035ea6
|
fix: Move templating functionality to global, making it possible to replace templates across the config
|
2026-01-25 10:32:22 +00:00 |
|
jamesread
|
f173a0b725
|
chore: reduce gocyclo
|
2026-01-11 22:34:23 +00:00 |
|
jamesread
|
93d56cc42e
|
chore: Fix broken unit tests, add themeLoading test
|
2026-01-11 22:24:18 +00:00 |
|
jamesread
|
87913a6ff3
|
feat: add theme selector support, load themes in a layer.
|
2026-01-11 21:32:55 +00:00 |
|
jamesread
|
a36e69b8f8
|
chore: calendar fixes
|
2026-01-11 01:50:27 +00:00 |
|
jamesread
|
a4ff326625
|
chore: calendar logging fixes
|
2026-01-11 01:48:17 +00:00 |
|
jamesread
|
84bd405ca9
|
chore: gocyclo fixes
|
2026-01-11 01:29:27 +00:00 |
|
jamesread
|
6493f7bee7
|
feat: block notifications, and cleanup of action/binding IDs
|
2026-01-11 01:10:20 +00:00 |
|
jamesread
|
e96270046e
|
fix: (#765) set X-Accel-Buffering header to disable nginx buffering for event stream
|
2026-01-07 01:20:29 +00:00 |
|
jamesread
|
8e2db0ad82
|
chore: reduce argument validation complexity
|
2025-12-23 16:47:59 +00:00 |
|
jamesread
|
09e1f0f984
|
fix: Argument validation targets the bindings (fixes checkboxes, etc)
|
2025-12-23 16:42:00 +00:00 |
|
jamesread
|
a2410fc9d6
|
feat: Entity directories, inline actions, and all entity fields are now available in the entity details view
|
2025-12-01 21:48:27 +00:00 |
|
jamesread
|
39009fcdd1
|
chore: code fmt
|
2025-12-01 01:59:10 +00:00 |
|
jamesread
|
56365af24b
|
feat: Mega entity improvements - entity directories, inehrit entities (#450), ordering (#762 / #703), better entity view
|
2025-12-01 01:38:04 +00:00 |
|
jamesread
|
7425db53f6
|
fix: #718 - Clear OAuth2 authentication cookie on logout
|
2025-11-30 11:19:36 +00:00 |
|
jamesread
|
8bad1b5400
|
fix: #703 - Entities order was non-deterministic
|
2025-11-27 00:02:08 +00:00 |
|
jamesread
|
853972384c
|
security: Possible to kill actions without authentication & credential leak in logs
|
2025-11-26 23:07:25 +00:00 |
|
jamesread
|
be7c754043
|
feat: Rebuild authentication system to support 3k authentication
|
2025-11-26 22:33:19 +00:00 |
|
jamesread
|
b244b42e91
|
fix: sort OAuth2 providers by key
|
2025-11-22 23:27:54 +00:00 |
|
jamesread
|
3d763a84df
|
fix: Various oauth issues
|
2025-11-22 22:39:05 +00:00 |