Commit Graph

86 Commits

Author SHA1 Message Date
jamesread b298a6bd8c chore: Treat root fieldset separately for ordering 2026-03-09 09:31:40 +00:00
jamesread dcb5bd0c82 chore: Allow entity key ordering for actionless components 2026-03-09 09:18:24 +00:00
jamesread 93a9636a82 chore: additional test coverage for view permission 2026-03-09 08:55:47 +00:00
jamesread 71bb999950 security: Actions that people didnt have permission to view were being returned (#921) 2026-03-08 22:45:46 +00:00
jamesread 5ff6b5d080 fix: Entity ordering (#886, #762) 2026-03-08 22:16:24 +00:00
jamesread b032ae5e5e chore: fix regression on arguments not being found 2026-03-05 08:29:30 +00:00
James Read 93d983c506
Merge branch 'next' into advisory-fix-1 2026-03-05 03:24:12 -05:00
jamesread d7962710e7 security: GHSA-jf73-858c-54pg (MODERATE) View permission not being checked when returning dashboards 2026-03-05 08:20:02 +00:00
James Read 5e0c052e68
Merge branch 'next' into advisory-fix-1 2026-03-04 19:16:07 -05:00
James Read 6202736d53
Merge commit from fork
security: GHSA-p443-p7w5-2f7f (MODERATE) RestartAction always runs actions as guest
2026-03-04 19:05:48 -05:00
jamesread cb46a597b2 security: GHSA-p443-p7w5-2f7f (MODERATE) RestartAction always runs actions as guest 2026-03-05 00:04:58 +00:00
jamesread d6a0abc375 security: GHSA-gq2m-77hf-vwgh (MODERATE) Session Fixation: Logout Fails to Invalidate Server-Side Session 2026-03-04 23:31:15 +00:00
jamesread bb14c5da3e security: (MED) GHSA-fwhj-785h-43hh Crash on NPE by calling APIs with invalid bindings or log references 2026-03-04 22:51:58 +00:00
jamesread aa2bd95ccb feat(policy): add policy to show/hide version number
Made-with: Cursor
2026-02-27 21:26:55 +00:00
jamesread 54eb2a6586 fix: User login log message fixed when password matches, but user lookup fails 2026-02-27 00:10:45 +00:00
jamesread 03da2ff2e7 security: Try to set cookies secure, with force override option 2026-02-26 23:43:50 +00:00
jamesread 4744169aa0 chore: code cleanup, remove todos, etc 2026-02-26 23:07:07 +00:00
jamesread e9a3863b1b chore: codestyle 2026-02-26 20:56:51 +00:00
jamesread 4af4d516be fix: ShowDiagnostics now behind policy checks 2026-02-26 20:43:14 +00:00
jamesread 24cced0c8c security: IDOR on ExecutionStatus API 2026-02-26 20:23:48 +00:00
jamesread a7be68b359 security: 10-slot Semaphore around password hash functions to prevent resource exhaustion attacks 2026-02-26 16:49:29 +00:00
jamesread 1335302e80 chore: codestyle 2026-02-26 00:48:21 +00:00
jamesread ea4cdf9df2 fix: Logs page pagination (#883) 2026-02-19 20:33:51 +00:00
jamesread 1248ee8765 chore: remove extranious comments 2026-02-13 23:36:16 +00:00
jamesread b777d599aa fix: Massive cleanup of template parsing 2026-02-07 00:09:46 +00:00
James Read 54080efdf3
Fix move tpl to global (#848) 2026-01-26 11:33:36 +00:00
jamesread 561cd9c431 fix: Various coderabbit suggestions on tpl ext 2026-01-26 00:46:17 +00:00
jamesread 0e0bbd3fdb fix: Nil binding on entity logs caused a NPE 2026-01-26 00:34:39 +00:00
James Read cf00d179bf
Merge branch 'next' into fix-move-tpl-to-global 2026-01-25 22:53:02 +00:00
jamesread e807cb5231 feat: configuration options for navigate-on-start icons 2026-01-25 21:50:03 +00:00
jamesread b37f035ea6 fix: Move templating functionality to global, making it possible to replace templates across the config 2026-01-25 10:32:22 +00:00
jamesread f173a0b725 chore: reduce gocyclo 2026-01-11 22:34:23 +00:00
jamesread 93d56cc42e chore: Fix broken unit tests, add themeLoading test 2026-01-11 22:24:18 +00:00
jamesread 87913a6ff3 feat: add theme selector support, load themes in a layer. 2026-01-11 21:32:55 +00:00
jamesread a36e69b8f8 chore: calendar fixes 2026-01-11 01:50:27 +00:00
jamesread a4ff326625 chore: calendar logging fixes 2026-01-11 01:48:17 +00:00
jamesread 84bd405ca9 chore: gocyclo fixes 2026-01-11 01:29:27 +00:00
jamesread 6493f7bee7 feat: block notifications, and cleanup of action/binding IDs 2026-01-11 01:10:20 +00:00
jamesread 661bcdda08 feat: #625 Option to save suggested values in the browser local storage across different args 2026-01-09 00:53:52 +00:00
jamesread e96270046e fix: (#765) set X-Accel-Buffering header to disable nginx buffering for event stream 2026-01-07 01:20:29 +00:00
jamesread 654ed15dde fix: Add missing enabled expression file 2026-01-06 21:39:46 +00:00
jamesread 3e23fed3d6 feat: Enable/Disable actions based on rules 2026-01-06 21:38:18 +00:00
jamesread 8e2db0ad82 chore: reduce argument validation complexity 2025-12-23 16:47:59 +00:00
jamesread 09e1f0f984 fix: Argument validation targets the bindings (fixes checkboxes, etc) 2025-12-23 16:42:00 +00:00
jamesread a2410fc9d6 feat: Entity directories, inline actions, and all entity fields are now available in the entity details view 2025-12-01 21:48:27 +00:00
jamesread 32fea4ec30 feat: Dashboard configs can now self-contain their entities, and actions all in one neat file 2025-12-01 16:15:08 +00:00
jamesread 2e82a3d1ed chore: remove some dead code 2025-12-01 12:28:44 +00:00
jamesread 39009fcdd1 chore: code fmt 2025-12-01 01:59:10 +00:00
jamesread 56365af24b feat: Mega entity improvements - entity directories, inehrit entities (#450), ordering (#762 / #703), better entity view 2025-12-01 01:38:04 +00:00
jamesread 7425db53f6 fix: #718 - Clear OAuth2 authentication cookie on logout 2025-11-30 11:19:36 +00:00