ᴊᴏᴇ ᴄʜᴇɴ aec2b842cd security: reject trailing spaces in .git path guard (#8408)

2026-08-25 22:51:50 -04:00

..

app

security: restrict ipynb sanitizer to safe image data URIs (#8326)

2026-06-05 23:15:49 -04:00

auth

Move sign-in MFA step to React with /api/web/user/mfa (#8288)

2026-05-22 15:33:06 -04:00

authx

all: rename packages ending with "util" to end with "x" (#8182)

2026-02-16 13:25:19 -05:00

avatar

chore: replace pkg/errors with cockroachdb/errors (#8098)

2026-01-22 08:20:53 -05:00

conf

conf: resolve session and TLS cert paths against work directory (#8386)

2026-07-12 15:40:50 -04:00

context

web: remove the install page (#8350)

2026-06-10 10:11:57 -04:00

cron

chore: remove all MIT license file headers (#8083)

2026-01-08 19:32:15 -05:00

cryptox

all: rename packages ending with "util" to end with "x" (#8182)

2026-02-16 13:25:19 -05:00

database

security: reject trailing spaces in .git path guard (#8408)

2026-08-25 22:51:50 -04:00

dbtest

all: rename packages ending with "util" to end with "x" (#8182)

2026-02-16 13:25:19 -05:00

dbx

all: rename packages ending with "util" to end with "x" (#8182)

2026-02-16 13:25:19 -05:00

email

security: enforce RESET_PASSWORD_CODE_LIVES on reset tokens (#8328)

2026-06-06 21:32:19 -04:00

errx

all: rename packages ending with "util" to end with "x" (#8182)

2026-02-16 13:25:19 -05:00

form

web: remove the install page (#8350)

2026-06-10 10:11:57 -04:00

gitx

all: rename packages ending with "util" to end with "x" (#8182)

2026-02-16 13:25:19 -05:00

httplib

security: don't follow redirects on webhook delivery (#8263)

2026-05-18 21:08:46 -04:00

iox

all: rename packages ending with "util" to end with "x" (#8182)

2026-02-16 13:25:19 -05:00

lazyregexp

all: rename packages ending with "util" to end with "x" (#8182)

2026-02-16 13:25:19 -05:00

lfsx

security: verify content hash on LFS dedupe shortcut (#8333)

2026-06-06 23:03:53 -04:00

markup

security: restrict ipynb sanitizer to safe image data URIs (#8326)

2026-06-05 23:15:49 -04:00

mocks

chore: remove all MIT license file headers (#8083)

2026-01-08 19:32:15 -05:00

netx

all: rename packages ending with "util" to end with "x" (#8182)

2026-02-16 13:25:19 -05:00

osx

all: rename packages ending with "util" to end with "x" (#8182)

2026-02-16 13:25:19 -05:00

pathx

all: rename packages ending with "util" to end with "x" (#8182)

2026-02-16 13:25:19 -05:00

process

security: close SSRF in repository migration and recurring mirror sync (#8324)

2026-06-05 22:13:57 -04:00

ptrx

web: migrate commit page with @pierre/diffs and @pierre/trees (#8295)

2026-05-29 00:30:26 -04:00

repox

security: reject path traversal in owner and repository names (#8334)

2026-06-06 23:14:42 -04:00

route

web: remove the install page (#8350)

2026-06-10 10:11:57 -04:00

semverx

all: rename packages ending with "util" to end with "x" (#8182)

2026-02-16 13:25:19 -05:00

ssh

security: time out stalled SSH handshakes after 15s (#8335)

2026-06-06 23:27:31 -04:00

strx

web: move password reset to React (#8290)

2026-05-23 21:55:22 -04:00

sync

Replace github.com/unknwon/com with stdlib and internal helpers (#8148)

2026-02-05 22:08:54 -05:00

template

all: rename packages ending with "util" to end with "x" (#8182)

2026-02-16 13:25:19 -05:00

testx

all: rename packages ending with "util" to end with "x" (#8182)

2026-02-16 13:25:19 -05:00

tool

tool: avoid panic in BasicAuthDecode on a value with no colon (#8387)

2026-07-14 21:23:40 -04:00

urlx

security: harden same-site redirect validation (#8391)

2026-07-16 10:19:00 -04:00

userx

security: enforce RESET_PASSWORD_CODE_LIVES on reset tokens (#8328)

2026-06-06 21:32:19 -04:00