actual

mirror of https://github.com/actualbudget/actual.git synced 2026-03-22 00:13:45 -05:00

Files

Matiss Janis Aboltins 8237da8e7b [AI] Simplify @font-face validation to only block external URLs

Remove ~210 lines of overly thorough font validation (MIME type allowlists,
base64 encoding checks, format hint validation, @font-face property allowlists,
font-family name regex) and replace with a single function that enforces the
actual security goal: rejecting non-data: URIs to prevent external resource
loading. Size limits for DoS prevention are preserved.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-19 22:06:43 +00:00

api

[AI] Experimental CLI tool for Actual (#7208 )

2026-03-18 18:22:38 +00:00

ci-actions

Migrate get-next-package-version.js to TypeScript (#7227 )

2026-03-17 13:56:47 +00:00

cli

[AI] Experimental CLI tool for Actual (#7208 )

2026-03-18 18:22:38 +00:00

component-library

⬆️ march dependency updates (#7222 )