changedetection.io

Autor	SHA1	Wiadomość	Data
dgtlmoon	d297850539	Security - Fix test	2024-11-07 20:10:02 +01:00
dgtlmoon	751239250f	Security check - improve test	2024-11-07 19:41:48 +01:00
dgtlmoon	49bc982c69	CVE-2024-51998 - file:/ path traversal access should not be allowed to access a file without ALLOW_FILE_URI set	2024-11-07 18:45:19 +01:00
dgtlmoon	e756e0af5e	Fixing file:// file pickup - for change detection of local files (#2505 )	2024-07-18 13:05:27 +02:00
dgtlmoon	8f3a6a42bc	Testing - Adding simple memory usage test (#2483 )	2024-07-11 15:03:42 +02:00
dgtlmoon	c0f000b1d1	Merge pull request from GHSA-pwgc-w4x9-gw67 * Auto-escape was not enabled GHSA-pwgc-w4x9-gw67 * Auto-escape was not enabled because the filenames were not something jinja2 enables it for.	2024-05-02 11:46:31 +02:00
dgtlmoon	c8dcc072c8	Code refactor for fetchers (#1941 )	2023-11-13 10:42:56 +01:00
dgtlmoon	52f2c00308	UI/Functionality - Ability to manage/apply filters and notifications across tags/groups	2023-06-19 23:29:13 +02:00
dgtlmoon	f8e587c415	Security - Possible stored XSS in watch list - Only permit HTTP/HTTP/FTP by default - override with env var `SAFE_PROTOCOL_REGEX` (#1359 )	2023-01-29 11:12:06 +01:00
dgtlmoon	f2fa638480	Security update - Protect against file:/// type access by webdriver/chrome. (#483 )	2022-03-21 20:59:20 +01:00