happyview
A lexicon-driven AppView for ATProto. forked from gamesgamesgamesgames.games/happyview
Star
Fork
Watch

Commits on dev
fix: verify CIDs v2.11.4 main
committed
test: add migrator verification
committed
fix: remove user drop from e2e setup
committed
docs: add docs for the new Github Actions
committed
fix: escape metacharacters in `find_blob_author_did`
committed
fix: revert to root user in Dockerfile
committed
Merge branch 'fix/critical-security' v2.11.3
committed
fix: move drop to app user after setup
committed
fix: secret comparisons now use constant time
committed
Merge pull request #74 from gamesgamesgamesgamesgames/fix/critical-security v2.11.2
committed
ci: prevent disk from filling during e2e tests fix/critical-security
committed
chore: update _so many_ deps
committed
fix: update deps
committed
ci: run e2e as root in CI
committed
fix: revoke member credentials before removing them from a space
committed
fix: Run Docker image as non-root user
committed
fix: add replay protection to dpop proofs
committed
fix: better handling for empty TOKEN_ENCRYPTION_KEY
committed
fix: prevent error details from leaking to external users
committed
docs: capture security concerns with record signing
committed
fix: prevent lockouts from failed super admin transfer
committed
fix: issue space credentials for `iss`, not for the caller
committed
fix: implement revocation for space credentials
committed
fix: prevent `listRepos` from leaking space participant lists
committed
Merge pull request #73 from gamesgamesgamesgamesgames/fix/critical-security v2.11.1
committed
fix: require auth on space notification endpoints
committed
fix: validate JWT aud in middleware
committed
fix: ensure superadmin-created admin API keys respect scopes
committed
fix: prevent victim record overwrite
committed
fix: prevent `read_self` from escalating during access merge
committed
fix: prevent db.raw access to sensitive tables
committed
fix: prevent use of default session secret
committed
fix: prevent CORS from reflecting credentials to arbitrary origins
committed
fix: prevent identity spoofing via /oauth/sessions
committed
docs: fix docs and blog on mobile
committed
docs: fix blob method typo
committed
docs: add 2.11 release article
committed
Merge pull request #70 from gamesgamesgamesgamesgames/dev v2.11.0
committed
Merge branch 'main' into dev
committed
docs: add Witchsky platform to post comments
committed
fix: add better validation to spaces impl v2.11.0-dev.2
committed
docs: update spaces docs to new `at://` syntax
committed
feat: align with final permissioned spaces proposal
committed
github-actions[bot]
Merge remote-tracking branch 'origin/main' into dev
committed
docs: restore sequoia publishing
committed
github-actions[bot]
Merge remote-tracking branch 'origin/main' into dev
committed
docs: add custom renderer for comments
committed
docs: reduce login scopes
committed
github-actions[bot]
Merge remote-tracking branch 'origin/main' into dev
committed
docs: add login, subscribe, and recommend
committed
github-actions[bot]
Merge remote-tracking branch 'origin/main' into dev
committed
docs: add comments to articles
committed
github-actions[bot]
Merge remote-tracking branch 'origin/main' into dev
committed
docs: fix article release date
committed
github-actions[bot]
Merge remote-tracking branch 'origin/main' into dev
committed
docs: new article
committed
Merge pull request #67 from gamesgamesgamesgamesgames/feat/jobs v2.11.0-dev.1
committed
fix: fix Playwright tests
committed
github-actions[bot]
Merge remote-tracking branch 'origin/main' into dev
committed
docs: add jobs docs
committed