Linus Rath 391ed6c018 Merge branch 'fix/security-audit-2026-10'

2026-10-19 12:58:50 +02:00

..

__tests__

Merge branch 'fix/security-audit-2026-10'

2026-10-19 12:58:50 +02:00

audit

fix: gate admin routes against cross-origin CSRF

2026-05-18 13:21:01 +02:00

auth

chore: write nul separators as \0 so git diffs these files as text

2026-09-30 19:34:37 +02:00

branding

fix: load the admin panel when the config is read-only #1249

2026-10-17 19:17:48 +02:00

change-password

fix: load the admin panel when the config is read-only #1249

2026-10-17 19:17:48 +02:00

config

fix: keep the extension directory URL off private addresses

2026-10-19 01:32:25 +02:00

extensions

feat: keep replaced plugin and theme versions and roll back to them

2026-10-19 00:08:10 +02:00

marketplace

Merge branch 'fix/security-audit-2026-10'

2026-10-19 12:58:50 +02:00

oauth/setup

fix: refuse OAuth auto-setup before touching Stalwart when the config is read-only #1250

2026-10-16 22:35:07 +02:00

plugin-approvals

fix: load the admin panel when the config is read-only #1249

2026-10-17 19:17:48 +02:00

plugins

feat: keep replaced plugin and theme versions and roll back to them

2026-10-19 00:08:10 +02:00

policy

fix: load the admin panel when the config is read-only #1249

2026-10-17 19:17:48 +02:00

telemetry

fix: gate admin routes against cross-origin CSRF

2026-05-18 13:21:01 +02:00

themes

feat: keep replaced plugin and theme versions and roll back to them

2026-10-19 00:08:10 +02:00

version

fix: invalidate persisted update status after an upgrade

2026-08-29 12:46:39 +02:00