sandrodachandClaude Opus 5.5 62463bc6fd fix(security): SSRF protection for alarm webhooks (FLAW-05) ...

Discord and custom webhook URLs are checked when saved and before every
call: https only, Discord URLs must point to discord.com. A guarded HTTP
client resolves hosts itself and connects only to allowed IPs; localhost,
link-local and cloud metadata are always blocked, LAN ranges (incl.
Tailscale CGNAT) and plain http only with the new admin switch.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-29 07:37:39 +01:00

..

account_test.go

feat(account): danger zone, restore import, larger API key field on phones

2026-10-29 07:13:29 +01:00

account.go

feat(account): danger zone, restore import, larger API key field on phones

2026-10-29 07:13:29 +01:00

demo_test.go

Paket C: Demo-Modus setzt Datenbank bei jedem Start zurück und befüllt sie neu

2026-10-28 23:04:43 +01:00

demo.go

Paket C: Demo-Modus setzt Datenbank bei jedem Start zurück und befüllt sie neu

2026-10-28 23:04:43 +01:00

docsync_sim_test.go

feat(notes): compact the operation log and purge old tombstones

2026-10-28 15:08:13 +01:00

docsync_test.go

feat: organizations decide who sees whom; sharing only by owners

2026-10-28 22:00:33 +01:00

docsync.go

feat(tasks): repeating tasks (daily, weekly, monthly, yearly)

2026-10-29 07:23:09 +01:00

export_markdown_test.go

feat(export): Obsidian-compatible Markdown vault as streamed ZIP

2026-10-28 23:21:20 +01:00

export_markdown.go

feat(tasks): repeating tasks (daily, weekly, monthly, yearly)

2026-10-29 07:23:09 +01:00

import_markdown_test.go

feat(tasks): repeating tasks (daily, weekly, monthly, yearly)

2026-10-29 07:23:09 +01:00

import_markdown.go

feat(tasks): repeating tasks (daily, weekly, monthly, yearly)

2026-10-29 07:23:09 +01:00

recurrence_test.go

feat(tasks): repeating tasks (daily, weekly, monthly, yearly)

2026-10-29 07:23:09 +01:00

recurrence.go

feat(tasks): repeating tasks (daily, weekly, monthly, yearly)

2026-10-29 07:23:09 +01:00

search_test.go

Paket B: Globale Suche mit SQLite FTS5, BM25-Ranking, Zugriffsprüfung und Cmd+K-Palette

2026-10-28 23:00:19 +01:00

search.go

Paket B: Globale Suche mit SQLite FTS5, BM25-Ranking, Zugriffsprüfung und Cmd+K-Palette

2026-10-28 23:00:19 +01:00

seed.go

feat(tasks): assign tasks in shared lists, unified people search, list avatars

2026-10-28 20:26:55 +01:00

sqlite_test.go

feat: organizations decide who sees whom; sharing only by owners

2026-10-28 22:00:33 +01:00

sqlite.go

fix(security): SSRF protection for alarm webhooks (FLAW-05)

2026-10-29 07:37:39 +01:00

tags_migration.go

fix: mobile layout, task clicks, list tab corners, hashtags in URLs

2026-10-28 16:50:51 +01:00

task_assignees_test.go

feat(ui): one CountBadge for all counters; counters on tab corners

2026-10-28 22:54:15 +01:00

themes_test.go

feat(themes): custom CSS themes per user (upload, paste, live)

2026-10-28 22:12:27 +01:00

themes.go

feat(themes): custom CSS themes per user (upload, paste, live)

2026-10-28 22:12:27 +01:00

visibility_test.go

chore(db): stop wiping databases with an older schema version

2026-10-29 06:43:51 +01:00

visibility.go

feat: organizations decide who sees whom; sharing only by owners

2026-10-28 22:00:33 +01:00