Alexandr Kazmin
04bcf5ea5a
Decode proxy credentials for browser fetchers and redact them in logs ( #4502 )
...
Proxy usernames and passwords with special characters have to be URL-escaped
(#2062 ). The requests fetcher decodes them, but the Playwright and Puppeteer
fetchers and Browser Steps passed the escaped values to the browser as-is.
The proxy URL, password included, was also logged at DEBUG, the default level.
Add proxy_credentials() and redact_proxy_url() in changedetectionio/proxy_url.py
and use them at those sites, with unit tests.
2026-10-23 12:01:23 +02:00
dgtlmoon
3a71777499
UI - Fixing lots of actions that should be a POST style action which led to a 404
...
Also solves some of GHSA-56fq-63vj-9992 Add-watch-UI should be POST/CSRF protected
2026-09-04 12:38:20 +02:00
dgtlmoon
f42da28dab
GHSA-23mp-8222-96fr - reflected XSS in /diff/<uuid>/download-patch via from_version - Using built-in plain text response instead. Reported-by: Mayssare Amakhtari (@cy3erm)
...
Build and push containers / metadata (push) Canceled after 0s
Build and push containers / build-push-containers (push) Canceled after 0s
Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Build distribution 📦 (push) Canceled after 0s
ChangeDetection.io Container Build Test / Build linux/amd64 (alpine) (push) Canceled after 0s
ChangeDetection.io Container Build Test / Build linux/arm64 (alpine) (push) Canceled after 0s
ChangeDetection.io Container Build Test / Build linux/amd64 (main) (push) Canceled after 0s
ChangeDetection.io Container Build Test / Build linux/arm/v7 (main) (push) Canceled after 0s
ChangeDetection.io Container Build Test / Build linux/arm/v8 (main) (push) Canceled after 0s
ChangeDetection.io Container Build Test / Build linux/arm64 (main) (push) Canceled after 0s
ChangeDetection.io App Test / lint-code (push) Canceled after 0s
ChangeDetection.io App Test / lint-translations (push) Canceled after 0s
ChangeDetection.io App Test / lint-template-i18n (push) Canceled after 0s
Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Test the built package works basically. (push) Canceled after 0s
Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Publish Python 🐍 distribution 📦 to PyPI (push) Canceled after 0s
ChangeDetection.io App Test / test-application-3-10 (push) Canceled after 0s
ChangeDetection.io App Test / test-application-3-11 (push) Canceled after 0s
ChangeDetection.io App Test / test-application-3-12 (push) Canceled after 0s
ChangeDetection.io App Test / test-application-3-13 (push) Canceled after 0s
ChangeDetection.io App Test / test-application-3-14 (push) Canceled after 0s
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com > (#4324 )
2026-08-24 16:24:22 +02:00
dgtlmoon
50389b0778
GHSA-56fq-63vj-9992 Improved URL filtering ( #4315 )
2026-08-20 15:49:41 +02:00
dgtlmoon
71d332d5a0
UI full refactor / upgrade ( #4183 )
Build and push containers / metadata (push) Has been cancelled
Build and push containers / build-push-containers (push) Has been cancelled
Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Build distribution 📦 (push) Has been cancelled
ChangeDetection.io App Test / lint-code (push) Has been cancelled
ChangeDetection.io App Test / lint-translations (push) Has been cancelled
ChangeDetection.io App Test / lint-template-i18n (push) Has been cancelled
Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Test the built package works basically. (push) Has been cancelled
Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Publish Python 🐍 distribution 📦 to PyPI (push) Has been cancelled
ChangeDetection.io App Test / test-application-3-10 (push) Has been cancelled
ChangeDetection.io App Test / test-application-3-11 (push) Has been cancelled
ChangeDetection.io App Test / test-application-3-12 (push) Has been cancelled
ChangeDetection.io App Test / test-application-3-13 (push) Has been cancelled
ChangeDetection.io App Test / test-application-3-14 (push) Has been cancelled
2026-07-16 15:08:29 +02:00
dgtlmoon
31a760c214
CVE-2026-35490 - Authentication Bypass via Decorator Ordering
2026-04-04 05:58:53 +02:00
dgtlmoon
5a4266069b
Content Fetchers / Browsers - Improvements for pluggable extra fetchers/browsers. ( #3981 )
Build and push containers / metadata (push) Has been cancelled
Build and push containers / build-push-containers (push) Has been cancelled
Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Build distribution 📦 (push) Has been cancelled
ChangeDetection.io App Test / lint-code (push) Has been cancelled
Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Test the built package works basically. (push) Has been cancelled
Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Publish Python 🐍 distribution 📦 to PyPI (push) Has been cancelled
ChangeDetection.io App Test / test-application-3-10 (push) Has been cancelled
ChangeDetection.io App Test / test-application-3-11 (push) Has been cancelled
ChangeDetection.io App Test / test-application-3-12 (push) Has been cancelled
ChangeDetection.io App Test / test-application-3-13 (push) Has been cancelled
ChangeDetection.io App Test / test-application-3-14 (push) Has been cancelled
2026-03-15 17:35:46 +01:00
dgtlmoon
3558e9ee10
Browser Steps - Minor code cleanup
2026-02-16 13:22:54 +01:00
dgtlmoon
fe465de73c
Browser Steps - Clean off empty fields on save/update (UI and API), small refactor Re #3874 , #3879 ( #3880 )
2026-02-16 13:05:46 +01:00
dgtlmoon
892b645147
Refactor for Tags storage ( #3848 )
Build and push containers / metadata (push) Has been cancelled
Build and push containers / build-push-containers (push) Has been cancelled
Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Build distribution 📦 (push) Has been cancelled
Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Test the built package works basically. (push) Has been cancelled
Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Publish Python 🐍 distribution 📦 to PyPI (push) Has been cancelled
ChangeDetection.io App Test / lint-code (push) Has been cancelled
ChangeDetection.io App Test / test-application-3-10 (push) Has been cancelled
ChangeDetection.io App Test / test-application-3-11 (push) Has been cancelled
ChangeDetection.io App Test / test-application-3-12 (push) Has been cancelled
ChangeDetection.io App Test / test-application-3-13 (push) Has been cancelled
2026-02-07 13:13:02 +01:00
dgtlmoon
c2ee84b753
Browser Steps UI async_loop bug, refactored startup of BrowserSteps, increased test coverage. Re #3734 ( #3735 )
2026-01-14 11:27:01 +01:00
dgtlmoon
a8e7f8236e
BrowserSteps - remove unsupported exception class
2025-06-04 07:33:09 +02:00
dgtlmoon
73f3beda00
Realtime UI - Socketio tweaks and refactor ( #3220 )
2025-06-03 10:17:19 +02:00
dgtlmoon
162f573967
Fixes to ensure proxy errors are handled correctly ( #3168 )
2025-05-03 16:05:40 +02:00
dgtlmoon
72a1c3dda1
Browser Steps - error reporting and session shutdown improvements ( #3137 )
2025-04-22 12:18:51 +02:00
dgtlmoon
97291ce6d0
Code - Tidy up lint errors ( #3074 )
Build and push containers / metadata (push) Has been cancelled
Build and push containers / build-push-containers (push) Has been cancelled
Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Build distribution 📦 (push) Has been cancelled
Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Test the built 📦 package works basically. (push) Has been cancelled
Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Publish Python 🐍 distribution 📦 to PyPI (push) Has been cancelled
ChangeDetection.io App Test / lint-code (push) Has been cancelled
ChangeDetection.io App Test / test-application-3-10 (push) Has been cancelled
ChangeDetection.io App Test / test-application-3-11 (push) Has been cancelled
ChangeDetection.io App Test / test-application-3-12 (push) Has been cancelled
ChangeDetection.io App Test / test-application-3-13 (push) Has been cancelled
2025-03-31 13:05:48 +02:00
dgtlmoon
ff00417bc5
Browser Steps - Should use the Watch URL/link after any Jinja2 type templates are applied
Build and push containers / metadata (push) Has been cancelled
Build and push containers / build-push-containers (push) Has been cancelled
Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Build distribution 📦 (push) Has been cancelled
ChangeDetection.io App Test / lint-code (push) Has been cancelled
Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Test the built 📦 package works basically. (push) Has been cancelled
Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Publish Python 🐍 distribution 📦 to PyPI (push) Has been cancelled
ChangeDetection.io App Test / test-application-3-10 (push) Has been cancelled
ChangeDetection.io App Test / test-application-3-11 (push) Has been cancelled
ChangeDetection.io App Test / test-application-3-12 (push) Has been cancelled
ChangeDetection.io App Test / test-application-3-13 (push) Has been cancelled
CodeQL / Analyze (javascript) (push) Has been cancelled
CodeQL / Analyze (python) (push) Has been cancelled
2025-02-27 17:22:39 +01:00
dgtlmoon
849c5b2293
BrowserSteps - Speed up scraping, refactor screenshot handling for very long pages ( #2999 )
Build and push containers / metadata (push) Waiting to run
Build and push containers / build-push-containers (push) Waiting to run
Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Build distribution 📦 (push) Waiting to run
Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Test the built 📦 package works basically. (push) Blocked by required conditions
Publish Python 🐍distribution 📦 to PyPI and TestPyPI / Publish Python 🐍 distribution 📦 to PyPI (push) Blocked by required conditions
ChangeDetection.io App Test / lint-code (push) Waiting to run
ChangeDetection.io App Test / test-application-3-10 (push) Blocked by required conditions
ChangeDetection.io App Test / test-application-3-11 (push) Blocked by required conditions
ChangeDetection.io App Test / test-application-3-12 (push) Blocked by required conditions
ChangeDetection.io App Test / test-application-3-13 (push) Blocked by required conditions
ChangeDetection.io Container Build Test / test-container-build (push) Has been cancelled
2025-02-27 16:52:38 +01:00
Mike Splain
bf0d410d32
Browser Steps UI - Interactive UI wasn't sending headers but was when the check ran ( #2551 )
2024-08-19 10:21:05 +02:00
dgtlmoon
343e359b39
Now saving last two HTML snapshots for future reference, refactor, dont write screenshots and xpath to disk when no change detected (saves disk IO) ( #2431 )
2024-06-23 09:19:32 +02:00
dgtlmoon
e4504fee49
Browser Steps - Fixing "goto site" step #2330 #2337 ( #2364 )
2024-05-15 10:49:30 +02:00
dgtlmoon
9449c59fbb
Code - Getting ready for newer python versions - packing our own strtobool ( #2291 )
2024-04-03 16:17:15 +02:00
dgtlmoon
c5a4e0aaa3
Fetching - Prefer to use SockPuppetBrowser ( #2163 )
2024-02-07 20:58:21 +01:00
Constantin Hong
4be0fafa93
Support Loguru as a logger ( #2036 )
2024-01-16 09:48:16 +01:00
dgtlmoon
8be0029260
Browser Steps - Fixing "'Response' object is not subscriptable" where quotes were used in connection URL - Quote wrapped URL for browserstep url was breaking the connection #1627 #1823 #2099 ( #2100 )
2024-01-11 10:12:00 +01:00
dgtlmoon
98f56736c1
Improve handling of SIGTERM shutdown in containers, remove unnecessary multi-process handler for pip installs, tidy up modules ( #2014 )
2023-12-01 17:31:09 +01:00
dgtlmoon
d8ee5472f1
Update playwright fetcher library and API calls
2023-11-28 11:20:06 +01:00
dgtlmoon
1709e8f936
UI - BrowserSteps - Show the screenshot of an error if it happened on a step, highlight which step had the error to make it easier to find out why the step didnt work, minor fixes to timeouts( #1883 )
2023-10-21 09:41:51 +02:00
dgtlmoon
463b2d0449
BrowserSteps - adding setup check
2023-05-12 15:41:00 +02:00
dgtlmoon
e4f6d54ae2
BrowserSteps - Refactored to re-use playwright context which should solve some errors
2023-05-12 15:38:55 +02:00
dgtlmoon
cf3f3e4497
BrowserSteps - BrowserSteps was not always following proxy information
2023-05-07 13:15:29 +02:00
dgtlmoon
ba76c2a280
BrowserSteps - remove minor delay
2023-05-07 13:15:20 +02:00
dgtlmoon
c454cbb808
BrowserSteps - Adding Goto URL step
2023-03-12 17:22:56 +01:00
dgtlmoon
0ed897c50f
New setting to allow passwordless access to your 'diff' page - perfect for sharing your diff page securely, refactored login code ( #1357 )
2023-01-29 22:36:55 +01:00
dgtlmoon
64caeea491
BrowserSteps - Cleanup interface on shutdown
2022-12-01 23:28:20 +01:00
dgtlmoon
3838bff397
BrowserSteps - More work on cleaner shutdowns of browser session
2022-12-01 23:08:28 +01:00
dgtlmoon
55ea983bda
BrowserSteps - Forcefully shutdown playwright to prevent any race-conditions waiting for it to shutdown
2022-12-01 19:32:05 +01:00
dgtlmoon
b4d79839bf
BrowserSteps - Make the UI require an extra step so it doesnt slow down the experience when clicking through the tabs ( #1175 )
2022-11-30 19:40:15 +01:00
dgtlmoon
0b8c3add34
BrowserSteps - Use correct mimetype for screenshot update
2022-11-29 14:07:53 +01:00
dgtlmoon
51d57f0963
BrowserSteps - Faster screenshot updates and enable gzip compression for all content replies in the UI ( #1171 )
2022-11-29 13:55:53 +01:00
dgtlmoon
5b530ff61c
Configurable "Browser Steps" when Playwright/Chrome is configured (enter text, scroll, wait for text, click button etc) ( #478 )
2022-11-24 20:53:01 +01:00
Alexandr Kazmin