Commit graph

5 commits

Author SHA1 Message Date
Hoang Nguyen df0f19bec7
[release] v0.12.2
* Mitigate open redirect vulnerability in login page

Current implementation won't allow full url redirection within local origin, and will allow open redirection with href like "//google.com".
Comparing redirect url's origin with current origin will ensure the two share the same protocol, hostname, and port.

* Update .clabot

Add catmandx to list of contributors for creating pull request
2023-11-09 11:40:26 +00:00
Someone 923fa48a97
[skip ci] Allow Insecure TLS like self-signed certificate for SMTP server (#118) 2023-11-07 18:27:27 +00:00
Jogai 7cd0a7a67e
[skip ci] Reduce layers in docker (#58)
* Reduce layers in docker

* Reduce docker layers

* Sign contributor agreement
2023-07-24 19:39:33 +01:00
John Wesley d68a27dd67
Sign the Contributor License Agreement 2023-07-22 22:36:17 -04:00
Yann Stepienik 2a6ac2ea08 [release] 0.9.8 2023-07-16 12:07:35 +01:00