Awesome Privacy

Recent Commits

• renovate[bot] (25 Feb 26)

  chore(deps): update dependency autoprefixer to v10.4.26

• renovate[bot] (25 Feb 26)

  chore(deps): update dependency stylelint to v17.4.0

• Frederick [Bot] (25 Feb 26)

  [skip ci] Updated swagger docs

• kolaente (25 Feb 26)

  chore: v2.0.0 release preparations

• kolaente (25 Feb 26)

  feat(dev): print commit statistics during tag-release

• kolaente (25 Feb 26)

  feat(frontend): use Password component in password update settings Replace FormField with Password component for new password input: - Provides real-time validation feedback (8-72 char requirement) - Remove redundant password confirmation field - Disable save button when form is invalid (validation errors or empty fields)

• kolaente (25 Feb 26)

  test(api): add tests for password validation in reset and update flows - Add httpCodeGetter interface to handle ValidationHTTPError in test helper - Add test case for password too short in password reset - Add test case for password too short in password update - Fix existing test data to use valid 8+ char passwords

• kolaente (25 Feb 26)

  feat(api): enforce password validation on reset and update flows Add bcrypt_password validation to password reset and update endpoints: - Add validation tag to PasswordReset.NewPassword struct field - Add validation tag to UserPassword.NewPassword struct field - Add c.Validate() calls in both handlers - Fix off-by-one error in bcrypt_password validator (use <= 72 not < 72) Password requirements: min 8 chars, max 72 bytes (bcrypt limit)

• kolaente (25 Feb 26)

  fix: detect and fail on oversized zip entries instead of silent truncation Replace io.LimitReader with a new readZipEntry helper that reads one extra byte to detect when content exceeds maxZipEntrySize (500MB). This prevents silent data corruption where partial file bytes would be stored as if the upload succeeded. The import now fails with ErrFileTooLarge instead of accepting truncated content for attachments and background blobs.

• kolaente (24 Feb 26)

  fix(restore): extract preValidateTableData to reduce cyclomatic complexity

• kolaente (24 Feb 26)

  fix(auth): use checked type assertions for all JWT claims

• kolaente (24 Feb 26)

  fix(restore): pre-validate all table data JSON before wiping database

• kolaente (24 Feb 26)

  fix(restore): limit zip entry read size to prevent decompression bombs

• kolaente (24 Feb 26)

  fix(attachments): use mime.FormatMediaType for Content-Disposition header

• kolaente (24 Feb 26)

  fix(db): validate table names and quote identifiers in raw SQL

• kolaente (24 Feb 26)

  fix(migration): use checked type assertion for background file id

• kolaente (24 Feb 26)

  fix(migration): limit zip entry read size to prevent decompression bombs

• kolaente (24 Feb 26)

  fix(migration): reject zip entries with path traversal in vikunja-file import

• kolaente (24 Feb 26)

  refactor(utils): extract ContainsPathTraversal to shared utils package

• kolaente (24 Feb 26)

  fix(restore): validate migration data before wiping database Move archive validation (migration file existence and slice bounds check) before the database wipe. Previously a malformed archive would first destroy the database and then panic, leaving the instance in an irrecoverable state with total data loss. Now the migration data is fully parsed and validated before any destructive operations occur.

• kolaente (24 Feb 26)

  fix(restore): validate database file names in zip archive Check that database entries in the zip have a .json suffix and a non-empty base name before slicing the extension off. This prevents a panic from index-out-of-range when the filename is too short. Also use TrimPrefix instead of ReplaceAll for correctness.

• kolaente (24 Feb 26)

  fix(restore): sanitize config file path to prevent zip slip Use filepath.Base() on the config file name from the zip archive before passing it to os.OpenFile, ensuring the config file is always written to the current directory regardless of what path the zip entry claims to have.

• kolaente (24 Feb 26)

  fix(restore): reject zip entries with path traversal sequences Validate all zip entry names during restore to reject entries containing directory traversal sequences (e.g. ../../../pwned.txt). This prevents a Zip Slip attack where a malicious archive could write files outside the intended extraction directory.

• kolaente (25 Feb 26)

  feat(cli): reorganize repair commands under unified 'vikunja repair' parent (#2300) Consolidate four scattered repair/maintenance CLI commands into a unified `vikunja repair` parent command with subcommands.

• kolaente (25 Feb 26)

  refactor: remove typesense support Typesense was an optional external search backend. This commit fully removes the integration, leaving the database searcher as the only search implementation. Changes: - Delete pkg/models/typesense.go (core integration) - Delete pkg/cmd/index.go (CLI command for indexing) - Simplify task search to always use database searcher - Remove Typesense event listeners for task sync - Remove TypesenseSync model registration - Remove Typesense config keys and defaults - Remove Typesense doctor health check - Remove Typesense initialization from startup - Clean up benchmark test - Add migration to drop typesense_sync table - Remove golangci-lint suppression for typesense.go - Remove typesense-go dependency

• kolaente (25 Feb 26)

  fix: prevent XSS via innerHTML injection in link edit prompt Replace innerHTML with DOM API calls in inputPrompt.ts. The oldValue parameter (sourced from a link's href attribute in the TipTap editor) was interpolated directly into an HTML string, allowing stored XSS if an attacker crafted a malicious href. Using document.createElement and setting .value as a property ensures the value is never parsed as HTML.

• kolaente (25 Feb 26)

  fix: prevent reflected HTML injection via filter URL parameter TipTap's setContent() parses strings as HTML via DOMParser, allowing crafted ?filter= URL parameters to inject SVG phishing buttons, anchor tags, and formatted content into the trusted UI. Use ProseMirror JSON document format instead of raw strings so the filter value is always set as a text node, bypassing HTML parsing entirely.

• kolaente (25 Feb 26)

  feat: add repair-projects CLI command

• kolaente (25 Feb 26)

  feat: add RepairOrphanedProjects function

• kolaente (25 Feb 26)

  test: add failing tests for RepairOrphanedProjects