 El RIDO
|
b6f0cb2632
Merge pull request #1888 from marouane-hassine/fix/dead-path-validation-guard
|
vor 3 Monaten |
|
El RIDO
|
a9b84497ed
use more descriptive variable names and comments to clarify purpose of UTF-8 decoding test
|
vor 3 Monaten |
|
El RIDO
|
6ae8d398c7
separate test cases
|
vor 3 Monaten |
|
El RIDO
|
96d1ac9754
Merge pull request #1889 from PrivateBin/json-exception
|
vor 3 Monaten |
|
El RIDO
|
310c2efbab
Switch to PHP native JsonException type
|
vor 3 Monaten |
|
El RIDO
|
b4e162ac23
add nosniff header to all JSON responses and escape base path in JSON-LD response
|
vor 3 Monaten |
|
El RIDO
|
9e1ac5a147
Merge branch 'master' into fix/dead-path-validation-guard
|
vor 3 Monaten |
 marouanehassine
|
3551c87038
fix: run PATH trailing-separator check instead of dead guard
|
vor 3 Monaten |
|
El RIDO
|
8a77305838
Merge pull request #1885 from marouane-hassine/fix/1883-malformed-v2-json-500
|
vor 3 Monaten |
|
El RIDO
|
3d4d6bf0e8
address multi-byte codepoint truncation, allowing DOMPurify bypass
|
vor 3 Monaten |
|
marouanehassine
|
abd1418bc8
fix: reject malformed JSON API bodies instead of crashing
|
vor 3 Monaten |
 Matt Van Horn
|
077fc16695
Merge remote-tracking branch 'upstream/master' into style/short-array-syntax-1640
|
vor 3 Monaten |
|
marouanehassine
|
e80efda7c2
fix: return "Invalid data." instead of HTTP 500 on malformed v2 payloads
|
vor 3 Monaten |
|
El RIDO
|
886d4419d7
Merge pull request #1881 from PrivateBin/dompurify-3.4.12
|
vor 3 Monaten |
|
Matt Van Horn
|
1359c30247
style: enforce short array syntax via StyleCI
|
vor 3 Monaten |
|
El RIDO
|
33e5178320
chore(doc): document changes
|
vor 3 Monaten |
|
El RIDO
|
2f17c5f1d6
chore(deps): update DOMpurify to 3.4.12
|
vor 3 Monaten |
|
El RIDO
|
b9aad1c866
add more test cases, stricter SVG handling
|
vor 3 Monaten |
|
El RIDO
|
360f2adeca
Merge pull request #1879 from PrivateBin/dependabot/github_actions/actions/setup-node-7
|
vor 3 Monaten |
|
El RIDO
|
b6f4278e07
Merge pull request #1878 from TowyTowy/fix/yourls-shorturl-null-fallback
|
vor 3 Monaten |
 dependabot[bot]
|
4a50fed678
chore(deps): bump actions/setup-node from 6 to 7
|
vor 3 Monaten |
 TowyTowy
|
bb8b77d714
Use a string statusCode in the YourlsProxy test
|
vor 4 Monaten |
|
El RIDO
|
4041a0b077
stricter preview checks, now that the MIME type gets lower cased on extraction
|
vor 4 Monaten |
|
El RIDO
|
ff0d596fe2
preventing attachment preview of malicious mime types
|
vor 4 Monaten |
|
El RIDO
|
d24bf31d8c
add tests to reproduce the reported MIME type sanitation issues
|
vor 4 Monaten |
|
TowyTowy
|
a0c0d154ee
fix: handle YOURLS 200 response without shorturl gracefully
|
vor 4 Monaten |
 rugk
|
89e5853197
fix: merge error missing %s in right place catched by tests
|
vor 4 Monaten |
|
rugk
|
1db5205de3
Merge branch 'js/removeJQuery' of https://github.com/PrivateBin/PrivateBin into js/removeJQuery
|
vor 4 Monaten |
|
rugk
|
36bccbca22
docs: merge in changelog
|
vor 4 Monaten |
|
rugk
|
7e8a3a60ec
Merge remote-tracking branch 'origin/master' into js/removeJQuery
|
vor 4 Monaten |
