dgtlmoon 158935f779 CVE-2026-27696 Small fix - Restricted hostnames can still be added but are only checked at fetch-time (not when rendering lists etc)

2026-02-28 23:07:50 +01:00

..

api

API - Processors configuration is now part of the API (#3902)

2026-02-25 11:30:39 +01:00

blueprint

API - Processors configuration is now part of the API (#3902)

2026-02-25 11:30:39 +01:00

browser_steps

Browser Steps - Clean off empty fields on save/update (UI and API), small refactor Re #3874, #3879 (#3880)

2026-02-16 13:05:46 +01:00

conditions

Development branch merge into release/master

2026-01-12 17:50:53 +01:00

content_fetchers

CVE-2026-27696 - Server-Side Request Forgery (SSRF) via Watch URLs, set env var ALLOW_IANA_RESTRICTED_ADDRESSES to true to access IANA reserved URLs such as http://169.254.169.254, http://10.0.0.1/, http://127.0.0.1/, etc.

2026-02-23 21:56:43 +01:00

diff

Development branch merge into release/master

2026-01-12 17:50:53 +01:00

jinja2_custom

Memory improvement - Use builtin markupsafe instead of creating a jinja2 template env each time for small strings (#3836)

2026-02-05 10:07:36 +01:00

model

Updates/migration - Re-run tag update, re-save to cleanup changedetection.json, code refactor (#3898)

2026-02-18 14:05:23 +01:00

notification

Development branch merge into release/master

2026-01-12 17:50:53 +01:00

processors

Unresolvable hostnames should still be added, they are checked for security at fetch time (#3933)

2026-02-27 11:00:44 +01:00

realtime

API - Processors configuration is now part of the API (#3902)

2026-02-25 11:30:39 +01:00

static

UI - Search modal - fixes for running in sub path

2026-02-18 10:27:12 +01:00

store

API - Processors configuration is now part of the API (#3902)

2026-02-25 11:30:39 +01:00

templates

Notification Token {{diff}} can accept arguments like {{diff_added(lines=5, context=2)}} (#3923)

2026-02-24 16:15:05 +01:00

tests

CVE-2026-27696 Small fix - Restricted hostnames can still be added but are only checked at fetch-time (not when rendering lists etc)

2026-02-28 23:07:50 +01:00

translations

Adding Ukranian translations, rebuilding translations. (#3936)

2026-02-28 21:59:44 +01:00

widgets

Language updates (#3764)

2026-01-17 14:11:57 +01:00

__init__.py

0.54.2

2026-02-27 11:00:57 +01:00

.gitignore

UI Feature - Add watch in "paused" state, saving then unpauses (#779)

2022-07-28 12:13:26 +02:00

auth_decorator.py

Regession - Shared history/diff page with anonymous access turned on should allow screenshot access (#3076)

2025-04-01 11:30:10 +02:00

custom_queue.py

Page fetchers - Were not truely running independently and could have been blocking eachother, this commit speeds up page fetches where there is more than 1 worker.

2026-01-13 16:32:50 +01:00

favicon_utils.py

Memory - Favicon reader had a memory leak, Restart fetch workers between jobs, misc tweaks (#3787)

2026-01-20 12:49:53 +01:00

flask_app.py

API - Processors configuration is now part of the API (#3902)

2026-02-25 11:30:39 +01:00

forms.py

Browser Steps - Clean off empty fields on save/update (UI and API), small refactor Re #3874, #3879 (#3880)

2026-02-16 13:05:46 +01:00

gc_cleanup.py

Adding a GC memory cleanup (releases cached libxml memory and others) (#3079)

2025-04-01 15:48:14 +02:00

html_tools.py

Fixing bad replacement of metadata causing possible content removal #3906 (#3908)

2026-02-20 00:55:37 +01:00

is_safe_url.py

Development branch merge into release/master

2026-01-12 17:50:53 +01:00

languages.py

Adding Ukranian translations, rebuilding translations. (#3936)

2026-02-28 21:59:44 +01:00

notification_service.py

Notification Token {{diff}} can accept arguments like {{diff_added(lines=5, context=2)}} (#3923)

2026-02-24 16:15:05 +01:00

pluggy_interface.py

Pluggy plugin hook for before and after a watch is processed (#3888)

2026-02-17 01:58:41 +01:00

PLUGIN_README.md

Watch history - Don't rescan whole history.txt when looking up a timestamp <->filepath (#3602)

2025-11-05 18:50:27 +01:00

pytest.ini

Run all pytests in parallel (#3569)

2025-10-28 21:32:25 +01:00

queue_handlers.py

Refactor of queue systenm and improve tests, improves multiple workers (#3826)

2026-02-02 22:28:27 +01:00

queuedWatchMetaData.py

Fetcher - CPU usage - Skip processing if the previous checksum and the just fetched one was the same (#925)

2022-12-14 15:08:34 +01:00

rss_tools.py

RSS Reader Mode parser improvements - Pick up all fields from RSS where possible, better auto-detect of the XML encoding if it wasnt set by the browser (#3646)

2025-11-19 16:42:25 +01:00

run_basic_tests.sh

CVE-2026-27696 - Server-Side Request Forgery (SSRF) via Watch URLs, set env var ALLOW_IANA_RESTRICTED_ADDRESSES to true to access IANA reserved URLs such as http://169.254.169.254, http://10.0.0.1/, http://127.0.0.1/, etc.

2026-02-23 21:56:43 +01:00

run_custom_browser_url_tests.sh

Build/test - Parallel test jobs for faster testing (#3568)

2025-10-28 13:24:22 +01:00

run_proxy_tests.sh

Run all pytests in parallel (#3569)

2025-10-28 21:32:25 +01:00

run_socks_proxy_tests.sh

Run all pytests in parallel (#3569)

2025-10-28 21:32:25 +01:00

strtobool.py

Page fetchers - Were not truely running independently and could have been blocking eachother, this commit speeds up page fetches where there is more than 1 worker.

2026-01-13 16:32:50 +01:00

test_cli_opts.sh

DB data migration upgrade fixes (#3811)

2026-01-28 12:02:19 +01:00

time_handler.py

Fix time schedule off-by-one bug at exact end times for all durations and add comprehensive edge case tests Re #846 (#3890)

2026-02-17 02:38:16 +01:00

validate_url.py

CVE-2026-27696 Small fix - Restricted hostnames can still be added but are only checked at fetch-time (not when rendering lists etc)

2026-02-28 23:07:50 +01:00

worker_pool.py

Refactor of queue systenm and improve tests, improves multiple workers (#3826)

2026-02-02 22:28:27 +01:00

worker.py

Minor code tidy

2026-02-17 02:46:22 +01:00