Matthew Knight
cba9b5c408
Add password complexity requirements
...
Require at least one uppercase letter, one lowercase letter, and one
digit in addition to the existing 8-character minimum.
Fixes #31
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 16:14:01 -08:00
Matthew Knight
fdcccce476
Merge pull request 'Validate proxy download URL host to prevent SSRF' ( #42 ) from fix/ssrf-proxy-download into main
...
Reviewed-on: https://git.ts.mattnite.net/mattnite/forgejo-tickets/pulls/42
2026-02-18 00:13:09 +00:00
Matthew Knight
f1b20edbe3
Merge pull request 'Require minimum 32-byte SESSION_SECRET' ( #41 ) from fix/session-secret-validation into main
...
Reviewed-on: https://git.ts.mattnite.net/mattnite/forgejo-tickets/pulls/41
2026-02-18 00:11:21 +00:00
Matthew Knight
c56b803010
Validate proxy download URL host to prevent SSRF
...
Fixes #26
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 16:07:31 -08:00
Matthew Knight
1af9d67525
Require minimum 32-byte SESSION_SECRET
...
Fixes #20
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 16:03:05 -08:00
Matthew Knight
244e530d4a
Escape user-supplied values in HTML email templates
...
Fixes #19
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 16:02:01 -08:00
Matthew Knight
e3ef03ddcd
Merge pull request 'Add rate limiting to authentication endpoints' ( #39 ) from fix/auth-rate-limiting into main
...
Reviewed-on: https://git.ts.mattnite.net/mattnite/forgejo-tickets/pulls/39
2026-02-17 23:59:36 +00:00
Matthew Knight
9b2a812d95
Add rate limiting to authentication endpoints
...
Fixes #15
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 15:55:34 -08:00
Matthew Knight
fc2a3880c4
Merge pull request 'Add CSRF protection to admin panel' ( #38 ) from fix/admin-csrf into main
...
Reviewed-on: https://git.ts.mattnite.net/mattnite/forgejo-tickets/pulls/38
2026-02-17 23:54:46 +00:00
Matthew Knight
4a0af136d5
Add CSRF protection to admin panel
...
Fixes #14
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 15:53:31 -08:00
Matthew Knight
e6cd175c92
Set Secure flag on session cookie for HTTPS
...
Fixes #9
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 15:50:18 -08:00
Matthew Knight
4d95fddb1b
Fix cached session bug
2026-02-17 12:14:34 -08:00
Matthew Knight
b187ee2257
Use customer names in UI and tickets
2026-02-16 23:08:29 +00:00
Matthew Knight
57177b126c
Check for repo write permissions -- needed to create labels
2026-02-16 10:18:32 -08:00
Matthew Knight
f58f646b7d
Fix "customer" label not being assigned
2026-02-16 09:14:29 -08:00
Matthew Knight
c7bdb3b66e
JWT SSO
2026-02-15 09:12:19 -08:00
Matthew Knight
8dcf60c970
Footnotes
2026-02-15 00:27:01 -08:00
Matthew Knight
da50fe4dde
Emojis and mermaid
2026-02-14 23:41:31 -08:00
Matthew Knight
02af677306
Fix attachments
2026-02-14 23:11:59 -08:00
Matthew Knight
7f1e554e40
Set label
2026-02-14 22:57:42 -08:00
Matthew Knight
210fa4ee2d
attachment fixes
2026-02-14 14:11:05 -08:00
Matthew Knight
0e52d7ef98
Render fixes
2026-02-14 13:33:19 -08:00
Matthew Knight
d23aa87f75
More forgejo features
2026-02-14 12:59:32 -08:00
Matthew Knight
387810676b
customer label
2026-02-14 02:31:47 -08:00
Matthew Knight
a932407748
Display names some more
2026-02-14 02:23:27 -08:00
Matthew Knight
fee62fed53
better display
2026-02-14 02:17:09 -08:00
Matthew Knight
cb21e0f6a2
Forgejo as the source of truth
2026-02-14 02:04:27 -08:00
Matthew Knight
2a21f6ba50
Sync comments
2026-02-14 01:26:58 -08:00
Matthew Knight
57a8bb5a5e
Fixes
2026-02-14 01:10:22 -08:00
Matthew Knight
61e9f00b1c
Improvements
2026-02-14 00:19:49 -08:00
Matthew Knight
c14cff4f51
Setting up webhooks
2026-02-13 23:05:42 -08:00
Matthew Knight
4fa62fc164
Init
2026-02-12 15:00:17 -08:00
Matthew Knight