dgtlmoon 1e3ad7f45e LIBXML Data integrity fix, libxml must be locked across threads for any XML parsing

2026-08-24 18:19:03 +02:00

..

apprise

UI full refactor / upgrade (#4183)

2026-07-16 15:08:29 +02:00

custom_browser_url

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

fetchers

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

import

…

itemprop_test_examples

…

llm

feature: allow a watch or group to append to the inherited AI Change Summary prompt (#4294)

2026-08-20 15:14:59 +02:00

plugins

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

proxy_list

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

proxy_socks5

…

restock

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

smtp

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

unit

GHSA-q85w-c766-h5g8 - Advisory for four unprotected routes in price_data_follower, check_proxy and language handling that missing. Reported-by: Mayssare Amakhtari (@cy3erm) Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-24 13:47:31 +02:00

visualselector

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

__init__.py

…

conftest.py

…

test2.pdf

…

test_access_control.py

CSRF - Test fix (#4316)

2026-08-20 15:13:16 +02:00

test_add_replace_remove_filter.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_api_notification_urls_validation.py

…

test_api_notifications.py

…

test_api_openapi.py

…

test_api_search.py

…

test_api_security.py

API Security - Watch GET history snapshot - Should return text/plain mimetype so it cant be accidently executed in the browser (#4158)

2026-05-19 11:36:42 +02:00

test_api_tags.py

…

test_api.py

UI full refactor / upgrade (#4183)

2026-07-16 15:08:29 +02:00

test_auth.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_automatic_follow_ldjson_price.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_backend.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_backup.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_basic_socketio.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_block_while_text_present.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_clone.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_commit_persistence.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_conditions.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_css_selector.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_datastore_isolation.py

…

test_diff_download_patch_xss.py

GHSA-23mp-8222-96fr - reflected XSS in /diff/<uuid>/download-patch via from_version - Using built-in plain text response instead. Reported-by: Mayssare Amakhtari (@cy3erm)

2026-08-24 16:24:22 +02:00

test_download_patch.py

…

test_element_removal.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_encoding.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_errorhandling.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_extract_csv.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_extract_regex.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_filter_exist_changes.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_filter_failure_notification.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_group.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_history_consistency.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_html_to_text.py

…

test_i18n.py

UI full refactor / upgrade (#4183)

2026-07-16 15:08:29 +02:00

test_ignore_regex_text.py

…

test_ignore_text.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_ignore.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_ignorehyperlinks.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_ignorestatuscode.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_ignorewhitespace.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_import.py

…

test_jinja2.py

…

test_jsonpath_jq_selector.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_language_selector_anonymous.py

GHSA-q85w-c766-h5g8 - Advisory for four unprotected routes in price_data_follower, check_proxy and language handling that missing. Reported-by: Mayssare Amakhtari (@cy3erm) Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-24 13:47:31 +02:00

test_live_preview.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_llm_all_changes_diff.py

…

test_llm_api_key_security.py

Code - LLM settings pydantic refactor (#4181)

2026-05-25 10:43:52 +02:00

test_llm_change_summary.py

feature: allow a watch or group to append to the inherited AI Change Summary prompt (#4294)

2026-08-20 15:14:59 +02:00

test_llm_group_overrides.py

feature: allow a watch or group to append to the inherited AI Change Summary prompt (#4294)

2026-08-20 15:14:59 +02:00

test_llm_preview.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_llm_token_budget.py

UI - LLM - Fix for settings (wtforms vs pydantic) (#4184)

2026-05-25 18:43:33 +02:00

test_lxml_concurrency.py

LIBXML Data integrity fix, libxml must be locked across threads for any XML parsing

2026-08-24 18:19:03 +02:00

test_nonrenderable_pages.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_notification_errors.py

…

test_notification_restock_token.py

fix: safe-empty restock default so restock notification tokens work for any watch (#4249)

2026-07-13 09:26:54 +02:00

test_notification.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_obfuscations.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_pdf.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_preview_endpoints.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_queue_handler.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_queue_ui.py

UI full refactor / upgrade (#4183)

2026-07-16 15:08:29 +02:00

test_request.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_restock_itemprop.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_rss_group.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_rss_reader_mode.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_rss_single_watch.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_rss_tag_token.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_rss.py

RSS - RSS pubDate is wrong on any non-UTC container: local time is relabelled as UTC - #4309 (#4314)

2026-08-20 15:49:29 +02:00

test_scheduler.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_search.py

…

test_security.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_settings_notifications_page.py

UI full refactor / upgrade (#4183)

2026-07-16 15:08:29 +02:00

test_settings_tag_force_reprocess.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_share_watch.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_source.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_tag_colour.py

GHSA-4j9m-cxq4-9c36 - Improved validation Stored CSS Injection via tag_colour Field (#4317)

2026-08-20 17:59:02 +02:00

test_tag_url_match.py

fix: watches auto-tagged by group url_match_pattern regex missing from group tab filter (#4267)

2026-07-22 08:44:22 +02:00

test_trigger_regex_with_filter.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_trigger_regex.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_trigger.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_ui.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_unique_lines.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_watch_edited_flag.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_watch_fields_storage.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_watchlist_unviewed_state.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test_xpath_default_namespace.py

…

test_xpath_selector_unit.py

…

test_xpath_selector.py

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

test.pdf

…

util.py

…