kolaente ea78e87147 fix(dump): limit copy size to prevent decompression bombs ...

Use io.CopyN with a max size limit when extracting files from zip
archives during restore to prevent potential DoS via decompression bombs.

2026-02-08 15:31:25 +01:00

..

caldav

fix(caldav): do not assume the first element is the VTODO component

2025-12-13 15:30:22 +01:00

cmd

feat: add vikunja doctor command for diagnostic checks (#2165)

2026-01-27 09:12:31 +00:00

config

feat: add configurable gravatar-compatible base URL (#2083)

2026-01-13 14:58:08 +01:00

cron

fix: correct license header references (#882)

2025-06-10 12:18:38 +02:00

db

refactor(db): extract testable ResolveDatabasePath function (#2193)

2026-02-08 10:47:57 +00:00

doctor

feat(doctor): add user namespace detection and improved storage diagnostics (#2180)

2026-02-01 11:57:35 +01:00

events

fix(events): only trigger task.updated once when marking task done

2025-11-16 11:01:15 +01:00

files

fix(files): seek to start before writing for consistent behavior

2026-02-08 15:31:25 +01:00

health

feat: introduce shared health check logic (#1073)

2025-07-02 21:01:41 +00:00

i18n

chore(i18n): update translations via Crowdin

2025-12-12 00:59:39 +00:00

initialize

feat: add S3 file storage support (#1688)

2025-11-06 08:37:04 +01:00

log

fix(deps): update module github.com/labstack/echo/v4 to v5 (#2131)

2026-01-24 20:38:32 +01:00

mail

fix(mail): disable queue when mailer disabled (#2069)

2026-01-08 15:51:31 +01:00

metrics

fix: correct license header references (#882)

2025-06-10 12:18:38 +02:00

migration

feat: add option to send Basic Auth header with webhook requests (#2137)

2026-01-30 15:07:31 +01:00

models

test(files): update tests for io.ReadSeeker API

2026-02-08 15:31:25 +01:00

modules

fix(dump): limit copy size to prevent decompression bombs

2026-02-08 15:31:25 +01:00

notifications

fix: use dark shadows for email template in dark mode (#2155)

2026-01-26 15:46:44 +01:00

plugins

fix(deps): update module github.com/labstack/echo/v4 to v5 (#2131)

2026-01-24 20:38:32 +01:00

red

fix: correct license header references (#882)

2025-06-10 12:18:38 +02:00

routes

fix(routes): restore SPA routing after Echo v5 upgrade

2026-01-25 11:07:48 +01:00

swagger

[skip ci] Updated swagger docs

2026-01-30 14:14:52 +00:00

user

fix(deps): update module github.com/labstack/echo/v4 to v5 (#2131)

2026-01-24 20:38:32 +01:00

utils

feat(doctor): add user namespace detection and improved storage diagnostics (#2180)

2026-02-01 11:57:35 +01:00

version

fix: correct license header references (#882)

2025-06-10 12:18:38 +02:00

web

fix(deps): update module github.com/labstack/echo/v4 to v5 (#2131)

2026-01-24 20:38:32 +01:00

webtests

fix(deps): update module github.com/labstack/echo/v4 to v5 (#2131)

2026-01-24 20:38:32 +01:00