medlogic
/
olivetin
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
1,282 Commits 1 Branch 0 Tags 12 MiB
Commit Graph

206 Commits

Author SHA1 Message Date
jamesread f044d90d55 security: Remote crash in OAuth2 GHSA-45m3-398w-m2m9 Thanks @kule500 for the responsible disclosure. CVE to follow. 2026-03-01 23:52:25 +00:00
jamesread aa2bd95ccb feat(policy): add policy to show/hide version number 
Made-with: Cursor
 2026-02-27 21:26:55 +00:00
jamesread 54eb2a6586 fix: User login log message fixed when password matches, but user lookup fails 2026-02-27 00:10:45 +00:00
jamesread 03da2ff2e7 security: Try to set cookies secure, with force override option 2026-02-26 23:43:50 +00:00
jamesread 4744169aa0 chore: code cleanup, remove todos, etc 2026-02-26 23:07:07 +00:00
jamesread e9a3863b1b chore: codestyle 2026-02-26 20:56:51 +00:00
jamesread f3549b035e Remove dead CORS package (L-2) 
The CORS helper was unused; its import was commented out in webuiServer.go.
Deleting the package removes the dormant origin-reflection security issue.
 2026-02-26 20:46:11 +00:00
jamesread 4af4d516be fix: ShowDiagnostics now behind policy checks 2026-02-26 20:43:14 +00:00
jamesread 24cced0c8c security: IDOR on ExecutionStatus API 2026-02-26 20:23:48 +00:00
James Read 6dfffd1170
security: 10-slot Semaphore around password hash functions to prevent… (#904) 2026-02-26 12:12:06 -05:00
jamesread a7be68b359 security: 10-slot Semaphore around password hash functions to prevent resource exhaustion attacks 2026-02-26 16:49:29 +00:00
jamesread cb71ddf401 fix: Set common security headers by default 2026-02-26 16:14:41 +00:00
jamesread 1335302e80 chore: codestyle 2026-02-26 00:48:21 +00:00
James Read bee81b43f2
Merge branch 'next' into fix-883-logs-pagination 2026-02-25 18:51:46 -05:00
jamesread 38d6b57077 chore: codefmt 2026-02-25 23:24:02 +00:00
James Read 26e77a961d
Merge commit from fork 
Advisory fix 1
 2026-02-22 17:27:07 +00:00
jamesread 4bbd2eab15 security: GHSA-49gm-hh7w-wfvf 2026-02-22 10:19:08 +00:00
jamesread ea4cdf9df2 fix: Logs page pagination (#883) 2026-02-19 20:33:51 +00:00
jamesread 544515c2a6 chore: #829, json support in template engine 2026-02-15 00:19:36 +00:00
James Read 321e8f9cb2
Fix: Remove JSON quotes from webhook JSONPath string extraction (#864) 2026-02-13 23:55:37 +00:00
jamesread 011ee866df feat: template parsing for env in password fields 2026-02-13 23:53:43 +00:00
jamesread 1248ee8765 chore: remove extranious comments 2026-02-13 23:36:16 +00:00
James Read ce5e21e2da
Merge branch 'next' into fix-jsonpath-quotes 2026-02-13 23:21:33 +00:00
jamesread cc8d8652f1 chore: dep update Feb 2026 2026-02-13 18:38:17 +00:00
jla 3afd7c26e5 Fix: Remove JSON quotes from webhook JSONPath string extraction 2026-02-07 22:35:03 -05:00
jamesread 086a5ffd22 chore: fix tpl coderabbit suggestions 2026-02-07 00:31:24 +00:00
jamesread b777d599aa fix: Massive cleanup of template parsing 2026-02-07 00:09:46 +00:00
dependabot[bot] 19641695f1
chore(deps): bump github.com/golang-jwt/jwt/v5 in /service 
Bumps [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) from 5.3.0 to 5.3.1.
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Commits](https://github.com/golang-jwt/jwt/compare/v5.3.0...v5.3.1)

---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v5
  dependency-version: 5.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-02-02 05:56:16 +00:00
jamesread efbab6776f chore: Dep update Jan 2026 2026-01-26 11:36:48 +00:00
James Read 54080efdf3
Fix move tpl to global (#848) 2026-01-26 11:33:36 +00:00
jamesread 561cd9c431 fix: Various coderabbit suggestions on tpl ext 2026-01-26 00:46:17 +00:00
jamesread 0e0bbd3fdb fix: Nil binding on entity logs caused a NPE 2026-01-26 00:34:39 +00:00
James Read cf00d179bf
Merge branch 'next' into fix-move-tpl-to-global 2026-01-25 22:53:02 +00:00
jamesread e807cb5231 feat: configuration options for navigate-on-start icons 2026-01-25 21:50:03 +00:00
jamesread b37f035ea6 fix: Move templating functionality to global, making it possible to replace templates across the config 2026-01-25 10:32:22 +00:00
jamesread b9f55ab508 fix: load logs on startup (#299) 2026-01-23 14:18:30 +00:00
jamesread aeaddda870 fix: add env support back 2026-01-23 00:04:55 +00:00
jamesread f06e56857e Merge branch 'main' into next 2026-01-22 09:27:48 +00:00
James Read 97c59b764c
fix: Port the calender schedulding fix from 2k to 3k (#830) (#831) 2026-01-22 09:13:19 +00:00
jamesread e3c785319a fix: Kill entire process group on timeout (#605) 2026-01-21 23:52:35 +00:00
jamesread b3430e3a5c fix: execOnCalendarFile, avoid possible crash deleting nil timers 2026-01-21 23:12:39 +00:00
jamesread b024c4a91b chore: Dependency bump Jan 2026 2026-01-21 13:23:36 +00:00
jamesread 56786491e8 fix: Port the calender schedulding fix from 2k to 3k (#830) 2026-01-13 17:47:28 +00:00
jamesread 3d106ee13b fix: JSON string marshalling in webhook uses raw strings 2026-01-12 00:10:40 +00:00
jamesread a10088a040 chore: Fix duplicate code in executor when trying to reduce cyclo 2026-01-11 23:12:34 +00:00
James Read b75d590343
Merge branch 'beta' into next 2026-01-11 23:09:49 +00:00
jamesread f173a0b725 chore: reduce gocyclo 2026-01-11 22:34:23 +00:00
jamesread 93d56cc42e chore: Fix broken unit tests, add themeLoading test 2026-01-11 22:24:18 +00:00
jamesread 87913a6ff3 feat: add theme selector support, load themes in a layer. 2026-01-11 21:32:55 +00:00
jamesread 242149f5a4 chore: reduce cyclo 2026-01-11 09:20:50 +00:00