Linus Rath 100f6db309 fix: skip the setup wizard in demo mode without a mail server

2026-10-31 18:00:13 +01:00

..

session.ts

fix: stop trusting the unprefixed sidebar-app frame cookie when COOKIE_SECURE=true (GHSA-cjm9-m826-mh78)

2026-10-26 11:48:38 +01:00

state.ts

fix: skip the setup wizard in demo mode without a mail server

2026-10-31 18:00:13 +01:00

token.ts

fix: write the admin config, password hash and setup token readable only by the app's own user

2026-10-26 11:48:38 +01:00

url-token.ts

fix: keep the setup token out of access logs, referers and history

2026-09-26 16:32:38 +02:00