changedetection.io

api

API Security - Watch GET history snapshot - Should return text/plain mimetype so it cant be accidently executed in the browser (#4158 )

2026-05-19 11:36:42 +02:00

blueprint

UI - LLM - Fix for settings (wtforms vs pydantic)

2026-05-25 18:17:28 +02:00

browser_steps

Browser Steps - Clean off empty fields on save/update (UI and API), small refactor Re #3874 , #3879 (#3880 )

2026-02-16 13:05:46 +01:00

conditions

i18n: Wrap untranslated UI strings and update ja translations (#4052 )

2026-04-16 03:54:13 +02:00

content_fetchers

Security - SSRF in ChangeDetection.io via urlparse/urllib3 Parser Differential

2026-05-25 17:57:41 +02:00

diff

Fix - diff_changed_to causing some missed notifications #4063 #3818 (#4066 )

2026-04-19 12:11:34 +02:00

jinja2_custom

Memory improvement - Use builtin markupsafe instead of creating a jinja2 template env each time for small strings (#3836 )

2026-02-05 10:07:36 +01:00

llm

LLM - Smarter reasoning budget logic for gemini models

2026-05-25 18:03:11 +02:00

model

Code - LLM settings pydantic refactor (#4181 )

2026-05-25 10:43:52 +02:00

notification

Security - SSRF in ChangeDetection.io via urlparse/urllib3 Parser Differential

2026-05-25 17:57:41 +02:00

processors

Security - SSRF in ChangeDetection.io via urlparse/urllib3 Parser Differential

2026-05-25 17:57:41 +02:00

realtime

Realtime - Suppress socket.io errors in logs (#3991 )

2026-03-19 18:02:07 +01:00

static

UI - Preview problem fix for extract_text/ignore_text #4138 (#4169 )

2026-05-20 13:57:17 +02:00

store

Code - LLM settings pydantic refactor (#4181 )

2026-05-25 10:43:52 +02:00

templates

lint: Bump dennis — adopt --strict mode and drop false-positive workarounds (#4182 )

2026-05-25 16:51:45 +02:00

tests

UI - LLM - Fix for settings (wtforms vs pydantic)

2026-05-25 18:17:28 +02:00

translations

0.55.6

2026-05-25 17:59:18 +02:00

widgets

Language updates (#3764 )

2026-01-17 14:11:57 +01:00

__init__.py

0.55.6

2026-05-25 17:59:18 +02:00

.gitignore

…

auth_decorator.py

Fixing GHSA-vwgh-2hvh-4xm5 — substring match in the shared_diff_access, improve access control to shared diff access (#4130 )

2026-05-11 14:43:27 +02:00

custom_queue.py

Page fetchers - Were not truely running independently and could have been blocking eachother, this commit speeds up page fetches where there is more than 1 worker.

2026-01-13 16:32:50 +01:00

favicon_utils.py

Memory - Favicon reader had a memory leak, Restart fetch workers between jobs, misc tweaks (#3787 )

2026-01-20 12:49:53 +01:00

flask_app.py

UI - LLM - Flag LLM_FEATURES_DISABLED to disable all LLM from the UI/system (#4171 )

2026-05-21 12:51:56 +02:00

forms.py

lint: Bump dennis — adopt --strict mode and drop false-positive workarounds (#4182 )

2026-05-25 16:51:45 +02:00

gc_cleanup.py

…

html_tools.py

Security - Hardening XML parser against XXE

2026-04-27 17:00:42 +10:00

is_safe_url.py

…

languages.py

Add Portuguese (Brasil) translation (#4033 )

2026-04-10 02:46:37 +02:00

notification_service.py

Notifications - raw_diff token was missing (#4177 )

2026-05-22 09:50:36 +02:00

pluggy_interface.py

LLM / AI Change detection rules and Summaries

2026-04-24 15:21:09 +02:00

PLUGIN_README.md

…

pytest.ini

…

queue_handlers.py

Refactor of queue systenm and improve tests, improves multiple workers (#3826 )

2026-02-02 22:28:27 +01:00

queuedWatchMetaData.py

…

rss_tools.py

RSS Reader Mode parser improvements - Pick up all fields from RSS where possible, better auto-detect of the XML encoding if it wasnt set by the browser (#3646 )

2025-11-19 16:42:25 +01:00

run_basic_tests.sh

CVE-2026-27696 - Server-Side Request Forgery (SSRF) via Watch URLs, set env var ALLOW_IANA_RESTRICTED_ADDRESSES to true to access IANA reserved URLs such as http://169.254.169.254 , http://10.0.0.1/, http://127.0.0.1/, etc.

2026-02-23 21:56:43 +01:00

run_custom_browser_url_tests.sh

…

run_proxy_tests.sh

…

run_socks_proxy_tests.sh

…

strtobool.py

Page fetchers - Were not truely running independently and could have been blocking eachother, this commit speeds up page fetches where there is more than 1 worker.

2026-01-13 16:32:50 +01:00

test_cli_opts.sh

DB data migration upgrade fixes (#3811 )

2026-01-28 12:02:19 +01:00

time_handler.py

Fix time schedule off-by-one bug at exact end times for all durations and add comprehensive edge case tests Re #846 (#3890 )

2026-02-17 02:38:16 +01:00

validate_url.py

Security - SSRF in ChangeDetection.io via urlparse/urllib3 Parser Differential

2026-05-25 17:57:41 +02:00

worker_pool.py

Refactor of queue systenm and improve tests, improves multiple workers (#3826 )

2026-02-02 22:28:27 +01:00

worker.py

Code - LLM settings pydantic refactor (#4181 )

2026-05-25 10:43:52 +02:00