 jvoisin
|
f8171fe69f
perf(ui): batch changes in markPageAsRead
|
hace 1 mes |
|
jvoisin
|
ba684cabfd
perf(ui): add `immutable` to Cache-Control
|
hace 1 mes |
|
jvoisin
|
9151dc5377
perf(storage): extract a query from a cursor lock
|
hace 1 mes |
|
jvoisin
|
ca7c38a680
perf(storage): Use SKIP LOCKED in ArchiveEntries
|
hace 1 mes |
 Frédéric Guillot
|
f5bfd5a70c
refactor(oauth2): make Google and OIDC providers mutually exclusive
|
hace 1 mes |
|
Frédéric Guillot
|
f6c5f2f740
fix(oauth2): scope OIDC client secret warning to OIDC configuration
|
hace 1 mes |
|
Frédéric Guillot
|
2de3427dc7
refactor(oauth2): update Google OAuth endpoints to v2
|
hace 1 mes |
|
jvoisin
|
21703c81f4
perf(sanitizer): Use an io.MultiReader
|
hace 1 mes |
|
jvoisin
|
b79f22a63c
perf(sanitizer): html.Parse already lowercases tag names
|
hace 1 mes |
 dependabot[bot]
|
59bd092a02
build(deps): bump github.com/tdewolff/minify/v2 from 2.24.10 to 2.24.11
|
hace 1 mes |
|
Frédéric Guillot
|
1d4ca6a6bc
fix(oauth2): check HTTP status from Google userinfo endpoint
|
hace 1 mes |
|
Frédéric Guillot
|
b4c9719000
fix(oauth2): clear state and code verifier from session after use
|
hace 1 mes |
|
Frédéric Guillot
|
5c9edf3c1b
fix(oauth2): verify OIDC ID token signature before trusting claims
|
hace 1 mes |
|
Frédéric Guillot
|
2b21269900
fix(oauth2): reject link overwrite when user already has a linked identity
|
hace 1 mes |
|
dependabot[bot]
|
d57774df00
build(deps): bump golang.org/x/image from 0.37.0 to 0.38.0
|
hace 1 mes |
|
Frédéric Guillot
|
07a9685ae5
ci(workflows): add consistent repository_owner guards
|
hace 1 mes |
|
Frédéric Guillot
|
cc06154d85
fix(timezone): compare locations by name instead of pointer
|
hace 1 mes |
|
Frédéric Guillot
|
fcde20903c
refactor(timezone): simplify AvailableTimezones and fix test typos
|
hace 1 mes |
|
Frédéric Guillot
|
570227c263
refactor(validator): reuse ValidateDirection in user modification
|
hace 1 mes |
|
Frédéric Guillot
|
2572809998
refactor(worker): add graceful shutdown to worker pool
|
hace 1 mes |
|
Frédéric Guillot
|
16ff071365
feat(sanitizer): allow iframes from framatube.org
|
hace 1 mes |
|
Frédéric Guillot
|
293209098a
fix(sanitizer): strip inner elements of blocked iframes
|
hace 1 mes |
|
Frédéric Guillot
|
76452fab99
refactor(storage): return errors from count functions used by metrics
|
hace 1 mes |
|
Frédéric Guillot
|
8c947e639b
refactor(metric): replace hardcoded status labels with constants
|
hace 1 mes |
|
Frédéric Guillot
|
96897a8425
refactor(metric): support graceful shutdown of metrics collector
|
hace 1 mes |
|
Frédéric Guillot
|
fa9ab92b40
docs(googlereader): update README to reflect HMAC-SHA256 change
|
hace 1 mes |
|
Frédéric Guillot
|
6ea078c1cb
fix(googlereader): use HMAC-SHA256 instead of HMAC-SHA1 for auth tokens
|
hace 1 mes |
|
Frédéric Guillot
|
3105e1e55b
fix(googlereader): use constant-time comparison for auth token validation
|
hace 1 mes |
|
Frédéric Guillot
|
9c28982f7c
refactor(server): extract listen target resolution into testable functions
|
hace 1 mes |
|
Frédéric Guillot
|
0162c467f2
refactor(ui): use consistent cache-busted URL pattern for all static assets
|
hace 1 mes |
