happyview
A lexicon-driven AppView for ATProto. forked from gamesgamesgamesgames.games/happyview
Star
Fork
Watch

Commits on fix/critical-security
ci: prevent disk from filling during e2e tests
committed
chore: update _so many_ deps
committed
fix: update deps
committed
ci: run e2e as root in CI
committed
fix: revoke member credentials before removing them from a space
committed
fix: Run Docker image as non-root user
committed
fix: add replay protection to dpop proofs
committed
fix: better handling for empty TOKEN_ENCRYPTION_KEY
committed
fix: prevent error details from leaking to external users
committed
docs: capture security concerns with record signing
committed
fix: prevent lockouts from failed super admin transfer
committed
fix: issue space credentials for `iss`, not for the caller
committed
fix: implement revocation for space credentials
committed
fix: prevent `listRepos` from leaking space participant lists
committed
fix: require auth on space notification endpoints
committed
fix: validate JWT aud in middleware
committed
fix: ensure superadmin-created admin API keys respect scopes
committed
fix: prevent victim record overwrite
committed
fix: prevent `read_self` from escalating during access merge
committed
fix: prevent db.raw access to sensitive tables
committed
fix: prevent use of default session secret
committed
fix: prevent CORS from reflecting credentials to arbitrary origins
committed
fix: prevent identity spoofing via /oauth/sessions
committed
docs: fix docs and blog on mobile
committed
docs: fix blob method typo
committed
docs: add 2.11 release article
committed
Merge pull request #70 from gamesgamesgamesgamesgames/dev v2.11.0
committed
Merge branch 'main' into dev
committed
docs: add Witchsky platform to post comments
committed
fix: add better validation to spaces impl v2.11.0-dev.2
committed
docs: update spaces docs to new `at://` syntax
committed
feat: align with final permissioned spaces proposal
committed
github-actions[bot]
Merge remote-tracking branch 'origin/main' into dev
committed
docs: restore sequoia publishing
committed
github-actions[bot]
Merge remote-tracking branch 'origin/main' into dev
committed
docs: add custom renderer for comments
committed
docs: reduce login scopes
committed
github-actions[bot]
Merge remote-tracking branch 'origin/main' into dev
committed
docs: add login, subscribe, and recommend
committed
github-actions[bot]
Merge remote-tracking branch 'origin/main' into dev
committed
docs: add comments to articles
committed
github-actions[bot]
Merge remote-tracking branch 'origin/main' into dev
committed
docs: fix article release date
committed
github-actions[bot]
Merge remote-tracking branch 'origin/main' into dev
committed
docs: new article
committed
Merge pull request #67 from gamesgamesgamesgamesgames/feat/jobs v2.11.0-dev.1
committed
fix: fix Playwright tests
committed
github-actions[bot]
Merge remote-tracking branch 'origin/main' into dev
committed
docs: add jobs docs
committed
docs: add missing bun.lock update
committed
github-actions[bot]
Merge remote-tracking branch 'origin/main' into dev
committed
docs: add standard.site publishing to the blog
committed
feat: add support for async jobs
committed
github-actions[bot]
Merge remote-tracking branch 'origin/main' into dev
committed
docs: fix blog links
committed
github-actions[bot]
Merge remote-tracking branch 'origin/main' into dev
committed
docs: add missing endpoint groups
committed
docs: add missing docs for permissioned spaces
committed
docs: fix missing table prefixes
committed
docs: fix date and formatting in 2.10 blog
committed