Repository navigation

Commits

History for

onmain

Commits on Nov 11, 2026
- ListLockAttachBleed: a list's write refusal covers the attachment API.
  xet7
  committed
  7bb3e13
Commits on Nov 1, 2026
- Security: UnassignedAttachBleed - attachment API writes obey assigned-only card scope.
  xet7
  committed
  532a96d
- CrossBoardExportBleed: a checklist scope stays on its board, and every export obeys Disable all export and Anonymize export users.
  xet7
  committed
  be67276
Commits on Oct 27, 2026
- Attachments: the API's JSON uploads, copies and the site logo are stored again.
  xet7
  committed
  e7505a4
- Hall of Fame regression audit: every fixed vulnerability still fixed, siblings of six of them closed.
  xet7
  committed
  ebcd02b
Commits on Oct 25, 2026
- SVG of any size is sanitized whole, streaming: on upload, on validation and on every serve.
  xet7
  committed
  e748559
- SVG is uploaded and shown as an image: an attachment, a cover, a board background, an avatar.
  xet7
  committed
  0afb133
Commits on Oct 16, 2026
- The file integrity scan waits for a quiet CPU again.
  xet7
  committed
  483f3cd
- Board role permissions apply to every board view and every path to a card.
  xet7
  committed
  5b2ed17
Commits on Oct 15, 2026
- Keep assigned-only members to their own cards' files on every read path.
  xet7
  committed
  7f3428d
Commits on Oct 13, 2026
- Email bounces with Amazon SES, Problems -> Email, and runtime tests for sending and receiving.
  xet7
  committed
  79ac301
- Email to card: board addresses, IMAP mailboxes, provider webhooks and Sandstorm grain email.
  xet7
  committed
  988b177
Commits on Oct 11, 2026
- Support Nextcloud ExApp identities and publish WeKan with embedded SQLite
  xet7
  committed
  a325cfe
Commits on Oct 10, 2026
- Streamed attachments are stored again, and a Trello .zip brings its files.
  xet7
  committed
  e7be1ed
Commits on Oct 9, 2026
Commits on Oct 8, 2026
- Record every board import before its first write, and let an admin keep or discard an interrupted one.
  xet7
  committed
  e8fac5e
Commits on Oct 2, 2026
Commits on Sep 30, 2026
- Fix ReplyBleed: attribute email replies to the recipient the address was sent to.
  xet7
  committed
  3151f8a
Commits on Sep 29, 2026
- Add semi-open boards, visible to every signed-in user.
  xet7
  committed
  f122a82
- Serve image attachments as thumbnails at /cdn/storage/attachments/<id>/thumbnail.
  xet7
  committed
  2be3ded
Commits on Sep 25, 2026
- Enforce disabled account status and revoke existing sessions.
  xet7
  committed
  c3caf87
Commits on Sep 24, 2026
- Fix administrator attachment previews and downloads in Files Report
  xet7
  committed
  f03463e

Breadcrumbs

User selector

Datepicker

Commit history

Commits on Nov 11, 2026

Commits on Nov 1, 2026

Commits on Oct 27, 2026

Commits on Oct 25, 2026

Commits on Oct 16, 2026

Commits on Oct 15, 2026

Commits on Oct 13, 2026

Commits on Oct 11, 2026

Commits on Oct 10, 2026

Commits on Oct 9, 2026

Commits on Oct 8, 2026

Commits on Oct 2, 2026

Commits on Sep 30, 2026

Commits on Sep 29, 2026

Commits on Sep 25, 2026

Commits on Sep 24, 2026