kolaente 3a0ea15d8c fix(security): hash password-reset, email-confirm and deletion tokens at rest (GHSA-r6w9-259g-gwrv)

2026-07-19 18:59:34 +02:00

..

avatar.go

chore(lint): suppress gosec false positives on SSRF-safe HTTP client calls

2026-03-23 16:34:22 +00:00

duration_test.go

fix(caldav): parse ISO 8601 week durations in reminder triggers (#3183)

2026-07-18 18:55:17 +02:00

duration.go

fix(caldav): parse ISO 8601 week durations in reminder triggers (#3183)

2026-07-18 18:55:17 +02:00

httpclient_test.go

fix: add timeouts to Gravatar, Unsplash, and SSRF-safe HTTP clients

2026-04-09 07:31:08 +00:00

httpclient.go

fix: add timeouts to Gravatar, Unsplash, and SSRF-safe HTTP clients

2026-04-09 07:31:08 +00:00

humanize_duration_test.go

…

humanize_duration.go

…

md5_string_test.go

…

md5_string.go

…

normalize_hex_test.go

…

normalize_hex.go

…

random_test.go

…

random.go

…

retry.go

fix(auth): retry up to three times when an auth provider cannot be reached

2026-01-05 21:50:40 +01:00

sha256_test.go

…

sha256.go

fix(security): hash password-reset, email-confirm and deletion tokens at rest (GHSA-r6w9-259g-gwrv)

2026-07-19 18:59:34 +02:00

slice_difference.go

…

strings.go

…

time.go

…

umask_unix.go

…

umask_windows.go

…

userns_linux_test.go

…

userns_linux.go

…

userns_other.go

…

write_to_zip.go

…

zip.go

refactor(utils): extract ContainsPathTraversal to shared utils package

2026-02-25 13:01:00 +01:00