Commits

Back

Последние изменения из mirror GitHub. Здесь видны не только SHA, но и автор, дата, количество файлов и зоны риска.

Reset

Показаны 3478 commit'ов, страница 26 из 70.

Previous | Next

0849abc

fix(updater): resilient token renewal during maintenance mode

2026-08-27T07:22:49+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

b457ec7

fix(updater+installer): improve shared-hosting reliability for updates and reinstalls

2026-08-27T05:11:06+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 8 | core 0 | module 0 | forbidden 0

Flags:

cf77567

fix(updater): make migrations from old installs fail loudly instead of silently

2026-08-26T14:11:35+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 4 | core 0 | module 0 | forbidden 0

Flags:

a213065

fix(installer): idempotent schema snapshot + real error messages

2026-08-26T06:10:57+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 4 | core 0 | module 0 | forbidden 0

Flags:

53817cc

fix(installer): require WIPE confirmation to reinstall over non-empty DB

2026-08-26T05:42:19+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 6 | core 0 | module 0 | forbidden 0

Flags:

d3a8614

chore: untrack SECURITY_AUDIT.md (internal audit log, not published)

2026-08-25T12:09:05+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

4f29048

fix(scheduler): widen error/output columns so failure recording cannot truncate

2026-08-25T10:27:45+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

7e2cfb6

fix(scheduler): keep next_run_at on re-registration, treat crashed runs as stale

2026-08-25T10:21:59+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

a143b44

docs: revise API reference, README and changelog for rates, portal, push and cron

2026-08-25T10:01:53+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 10 | core 0 | module 0 | forbidden 0

Flags:

0b142de

fix(push): remove p256dh/auth from subscription list, show delivery failures

2026-08-25T07:56:38+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 6 | core 0 | module 0 | forbidden 0

Flags:

a328480

refactor(modules): remove dead sandbox stubs, document trust model

2026-08-25T07:52:27+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 32 | core 0 | module 0 | forbidden 0

Flags:

6f7b83e

feat(ops): add cron observability — task status, heartbeat, API and UI

2026-08-25T07:39:03+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 26 | core 0 | module 0 | forbidden 0

Flags:

8d438a5

feat(updater): add force-unlock button to admin updates page

2026-08-25T07:01:09+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 8 | core 0 | module 0 | forbidden 0

Flags:

e1cf7ed

fix(updater): shorten lock TTL to 5 min when holder PID is dead

2026-08-25T06:41:19+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

c324c43

fix(web): strip .php extension regardless of path derivation

2026-08-25T06:17:22+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

e4a0e5d

fix(push): repair Web Push crypto, delivery diagnostics and shared-hosting cron

2026-08-25T06:06:42+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 30 | core 0 | module 0 | forbidden 0

Flags:

80bb1c6

docs(changelog): release v0.2.0.9

2026-08-25T04:44:57+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

22acf0a

docs: INST-9 follow-up — clarify required fields + HestiaCP nginx guide

2026-08-24T22:42:44+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 8 | core 0 | module 0 | forbidden 0

Flags:

b484067

fix(installer): INST-9 e() type error on db_port int + open_basedir warning

2026-08-24T22:14:11+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

3a83832

docs(changelog): release v0.2.0.8

2026-08-24T21:30:32+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

860af4f

fix(installer): INST-3 default role + INST-2 nginx template docs

2026-08-24T21:14:36+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 4 | core 0 | module 0 | forbidden 0

Flags:

b320ea5

fix(api): INST-4 team member_user_ids + INST-8 task project_id/assignee

2026-08-24T21:06:47+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 4 | core 0 | module 0 | forbidden 0

Flags:

20fadbe

fix(authz): use hasAnyPermissions for route permission check

2026-08-24T20:54:01+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

957ccb4

fix(rbac): add view-only permissions to routes for read operations

2026-08-24T20:45:23+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

90e0a0a

fix(installer): INST-1 — write database.php config during installation

2026-08-24T18:51:53+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

48513c2

docs(changelog): release v0.2.0.7

2026-08-24T17:54:36+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

06d8ffb

fix(installer): update password validation messages to match actual requirements

2026-08-24T17:49:47+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

f26fa3c

security: C-1 — wire ModuleCodeValidator into install flow; M-1 — revoke grants on executor→observer demotion

2026-08-24T17:38:20+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 4 | core 0 | module 0 | forbidden 0

Flags:

cd3fa9a

fix(ci): fix external_users_security_check regex and rlsScoped pattern matching

2026-08-24T17:16:41+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

0d9e1ed

feat(knowledge): add space_id to knowledge_templates for H-11 ACL

2026-08-24T16:58:10+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 8 | core 0 | module 0 | forbidden 0

Flags:

dbd5643

security: M-2 settings filtering + L-1 password validation

2026-08-24T16:34:27+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 4 | core 0 | module 0 | forbidden 0

Flags:

b5e6087

fix(roles): save permission_codes when creating a new role

2026-08-24T14:44:51+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

ed88829

fix(admin): fix admin KPI widgets showing 0 for all metrics

2026-08-24T14:38:29+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

73439eb

fix(roles): fix admin-roles page not showing saved permissions

2026-08-24T14:01:07+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

4470567

fix(security): L-12 — fix undefined $actorId variable in self-deroot check

2026-08-24T13:09:12+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

c8cabb2

fix(security): L-1 — enforce special character requirement in passwords

2026-08-24T09:18:14+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 6 | core 0 | module 0 | forbidden 0

Flags:

ff24a45

fix(security): L-12 — prevent root from de-rooting themselves, L-14 — CSV formula injection

2026-08-24T09:13:32+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 4 | core 0 | module 0 | forbidden 0

Flags:

2678cb0

fix(security): M-14 — strip EXIF metadata from chat image uploads

2026-08-24T09:08:29+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

75469ca

fix(security): H-3 — apply LikeEscaper across all 30+ repositories using LIKE

2026-08-24T09:03:51+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 64 | core 0 | module 0 | forbidden 0

Flags:

87da67d

fix(security): address audit findings C-1, C-2, H-2, H-4, H-5, H-8, H-10, M-1, M-2, M-4

2026-08-24T08:55:17+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 28 | core 0 | module 0 | forbidden 0

Flags:

6e6ba48

fix(security): address findings from new audit — C-1, C-2, H-2, H-4, H-5, H-8, H-10, M-1, M-2, M-4

2026-08-24T08:54:57+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

affe4c9

fix(security): M-7 — remove script-src-attr unsafe-inline, narrow connect-src, migrate all inline event handlers to data-attribute delegation

2026-08-24T06:30:36+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 14 | core 0 | module 0 | forbidden 0

Flags:

bdebb42

fix(security): L-2/3/5/7 — int-bind chat LIMIT/OFFSET, hardcode public settings scope, gate ambiguous_candidates behind ratecard.manage, keep external_guest payout permission across migrations

2026-08-24T06:11:48+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 8 | core 0 | module 0 | forbidden 0

Flags:

8b5665b

fix(security): address 19 audit findings (pass #2) — C-2 (module signing + root gate + MCP), H-1..H-7 (RLS bypass, profile rates, cron scheduler, module web exposure, activity sanitize, rate-card policy), M-1..M-8 (grant cleanup, chat validation, project sanitize, rate-card tx/authz), L-1/4/6/8 (knowledge visibility, email exposure, fail-closed observer, earnings permission)

2026-08-24T05:55:14+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 44 | core 0 | module 0 | forbidden 0

Flags:

9047024

fix(i18n): add 5 missing admin_logs keys to all 7 languages

2026-08-23T20:39:20+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 14 | core 0 | module 0 | forbidden 0

Flags:

7c6ba75

fix(ci): update security contract allowlists for external guest routes

2026-08-23T20:15:09+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

b539b5d

fix(csp): add nonce to header.php and footer.php inline scripts — was blocking i18n, theme, CSRF on all pages

2026-08-23T19:00:16+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 4 | core 0 | module 0 | forbidden 0

Flags:

5518e3c

fix(security): INFO-level hardening — password_needs_rehash, 40-bit backup codes, accurate authz_notes, API-CSP cleanup

2026-08-23T18:53:31+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 12 | core 0 | module 0 | forbidden 0

Flags:

c2f2429

fix(security): address 19 audit findings — H-1 (MCP FinancialFieldPolicy), M-1..M-9 (CSP/XSS/2FA/files/worklog/throttling/impersonation), L-1..L-12 (HTML/CSS/SSRF/ratelimit/password/cookie/fingerprint)

2026-08-23T18:32:47+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 78 | core 0 | module 0 | forbidden 0

Flags:

3cbcbcf

fix(time-analytics): period lock form dates got min=today from global auto-filler (blocking past period locks); add data-date-no-min + toolbar guard

2026-08-23T16:26:15+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 4 | core 0 | module 0 | forbidden 0

Flags: