kolaente 33389bb0b3 test(migration): regression test for forged attachment size ...

Builds an in-memory export zip with a 2 MB payload and a data.json
that claims size: 0, then asserts neither the honest 2 MB row nor
the forged 0-size row ends up in the files table. Covers
GHSA-qh78-rvg3-cv54.

2026-04-09 16:22:56 +00:00

..

auth

fix(security): validate link share JWTs against DB on every request

2026-04-09 15:38:07 +00:00

avatar

fix: add timeouts to Gravatar, Unsplash, and SSRF-safe HTTP clients

2026-04-09 07:31:08 +00:00

background

fix: add timeouts to Gravatar, Unsplash, and SSRF-safe HTTP clients

2026-04-09 07:31:08 +00:00

dump

chore(lint): suppress known gosec false positives

2026-03-23 16:23:15 +01:00

keyvalue

feat: add generic RememberValue[T] for type-safe keyvalue caching

2026-04-08 08:56:22 +00:00

migration

test(migration): regression test for forged attachment size

2026-04-09 16:22:56 +00:00