dgtlmoon 49bc982c69 CVE-2024-51998 - file:/ path traversal access should not be allowed to access a file without ALLOW_FILE_URI set

2024-11-07 18:45:19 +01:00

..

api

Remove same checksum skip check - saved a little CPU but added a lot of complexity (#2700)

2024-10-11 17:28:42 +02:00

apprise_plugin

Notification post:// get:// etc - Fixing URL encoding of headers so that '+' in URL is correctly parsed as ' ' (and other url-encodings) (#2745)

2024-10-28 16:59:49 +01:00

blueprint

Backups - Hide incomplete/running backups from being downloaded

2024-10-31 10:58:41 +01:00

content_fetchers

Restock detection - Add additional out-of-stock detection for PT language (#2738)

2024-10-24 20:03:14 +02:00

model

CVE-2024-51483 - Fix for limiting access to file:// via source:file:///tmp/file.txt when using webdriver/playwright

2024-10-31 22:49:31 +01:00

processors

CVE-2024-51998 - file:/ path traversal access should not be allowed to access a file without ALLOW_FILE_URI set

2024-11-07 18:45:19 +01:00

static

"Send test notification" in "Restock" mode was not working correclty when restock tokens "{{restock.price}}" were in the notification body (#2737)

2024-10-24 19:46:45 +02:00

templates

Backups - Backups now operate in the background, provide a nice UI to access/download previous backups (#2755)

2024-10-31 10:34:59 +01:00

tests

CVE-2024-51998 - file:/ path traversal access should not be allowed to access a file without ALLOW_FILE_URI set

2024-11-07 18:45:19 +01:00

__init__.py

0.47.05

2024-10-31 22:51:03 +01:00

.gitignore

…

apprise_asset.py

…

diff.py

Code - Update/modernise diff.py (#2471)

2024-07-09 15:08:13 +02:00

flask_app.py

Backups - Backups now operate in the background, provide a nice UI to access/download previous backups (#2755)

2024-10-31 10:34:59 +01:00

forms.py

#2502 - Add jinja2 template handling to request body and headers (#2740)

2024-10-28 15:46:05 +01:00

html_tools.py

Filters - Process all CSS and XPath 'subtract' selectors in a single pass to prevent index shifting and reference loss during DOM manipulation. (#2754)

2024-10-30 12:00:53 +01:00

importer.py

…

notification.py

Testing - Fix false filter missing check alerts

2024-09-17 16:55:04 +02:00

pytest.ini

…

queuedWatchMetaData.py

…

run_basic_tests.sh

Fixing file:// file pickup - for change detection of local files (#2505)

2024-07-18 13:05:27 +02:00

run_custom_browser_url_tests.sh

Code - Split content fetcher code up (playwright, puppeteer and requests), fix puppeteer direct chrome support (#2169)

2024-02-11 00:09:12 +01:00

run_proxy_tests.sh

Code - Split content fetcher code up (playwright, puppeteer and requests), fix puppeteer direct chrome support (#2169)

2024-02-11 00:09:12 +01:00

run_socks_proxy_tests.sh

[test] Use local data instead of reaching out to changedetection when testing (#2660)

2024-09-27 20:30:19 +02:00

safe_jinja.py

Merge pull request from GHSA-4r7v-whpg-8rx3

2024-04-25 22:06:09 +02:00

store.py

UTF-8 handling fixes, Improvements to whitespace filtering (#2691)

2024-10-10 14:59:39 +02:00

strtobool.py

Code - Getting ready for newer python versions - packing our own strtobool (#2291)

2024-04-03 16:17:15 +02:00

update_worker.py

#2727 Notifications - Fix "send test notification" on empty list, includes test (#2731)

2024-10-21 11:35:37 +02:00