Ralph Slooten dc9b8d54b7 Security: Add sandbox attribute to message iframe for extra later of security (already protected via CSP headers) ...

Note that this does not provide any additional security as such as the CSP headers do this, however it is another barrier when it comes to bypass attempts.

2026-03-28 08:01:51 +13:00

..

apiv1

Chore: Update Content-Disposition header to use inline display and escape filename

2026-03-10 12:03:35 +13:00

handlers

Security: Limit proxy requests to 50MB to prevent OOM attacks

2026-03-09 12:31:17 +13:00

ui

Feature: Include message attachment checksums (MD5, SHA1 & SHA254) in API message summary

2026-02-01 15:34:05 +13:00

ui-src

Security: Add sandbox attribute to message iframe for extra later of security (already protected via CSP headers)

2026-03-28 08:01:51 +13:00

webhook

Fix: Refactor webhook delay & rate limit logic to ignore endpoint response times & prevent hardcoded 1000 message limit when set to 0 (#656)

2026-03-16 22:29:45 +13:00

websockets

Chore: Refactor code with go fix

2026-03-03 16:03:28 +13:00

cors_test.go

Security: Enhance CORS origin handling to respect host:port distinctions

2026-03-09 12:30:56 +13:00

cors.go

Security: Enhance CORS origin handling to respect host:port distinctions

2026-03-09 12:30:56 +13:00

embed.go

Fix: Include font/woff content type to embedded controller

2025-02-13 22:16:46 +13:00

server_test.go

Chore: Refactor code with go fix

2026-03-03 16:03:28 +13:00

server.go

Fix typo

2026-03-26 07:47:20 +13:00