Hayden 13850cda1f

security: multiple reported CVE fixes (#1515) ...

* update out of date license

* update typing / refactor

* fix arbitrarty path injection

* use markdown sanatizer to prevent XSS CWE-79

* fix CWE-918 SSRF by validating url and mime type

* add security docs

* update recipe-scrapers

* resolve DOS from arbitrary url

* update changelog

* bump version

* add ref to #1506

* add #1511 to changelog

* use requests decoder

* actually fix encoding issue

2022-07-31 13:10:20 -08:00

..

AdvancedOnly.vue

feat: add on mounted hook for bookmarklets (#1120)

2022-04-01 11:05:25 -08:00

AppButtonCopy.vue

Use composition API for more components, enable more type checking (#914)

2022-01-08 21:15:23 -09:00

AppButtonUpload.vue

Use composition API for more components, enable more type checking (#914)

2022-01-08 21:15:23 -09:00

AppLoader.vue

Use composition API for more components, enable more type checking (#914)

2022-01-08 21:15:23 -09:00

AppToolbar.vue

refactor: ♻️ rewrite admin CRUD interface for admins (#825)

2021-11-23 18:57:24 -09:00

AutoForm.vue

chore: update dev dependencies (#1282)

2022-05-25 09:38:21 -08:00

BannerExperimental.vue

Feature/group based notifications (#918)

2022-01-09 21:04:24 -09:00

BaseButton.vue

Use composition API for more components, enable more type checking (#914)

2022-01-08 21:15:23 -09:00

BaseButtonGroup.vue

ux: unify UI based on user-feedback (#1216)

2022-05-11 17:14:03 -08:00

BaseCardSectionTitle.vue

Use composition API for more components, enable more type checking (#914)

2022-01-08 21:15:23 -09:00

BaseDialog.vue

Feature/user seedable foods (#1176)

2022-05-01 12:45:50 -08:00

BaseDivider.vue

Use composition API for more components, enable more type checking (#914)

2022-01-08 21:15:23 -09:00

BaseOverflowButton.vue

Fix more typing issues (#928)

2022-01-15 17:38:11 -09:00

BasePageTitle.vue

Use composition API for more components, enable more type checking (#914)

2022-01-08 21:15:23 -09:00

BaseStatCard.vue

chore: update dev dependencies (#1282)

2022-05-25 09:38:21 -08:00

ButtonLink.vue

Feature/shopping lists second try (#927)

2022-01-16 15:24:24 -09:00

ContextMenu.vue

refactor: unify recipe-organizer components (#1340)

2022-06-03 20:12:32 -08:00

CrudTable.vue

feat: create new foods and units from their Data Management pages (#1511)

2022-07-31 12:31:20 -08:00

DevDumpJson.vue

Feature/shopping lists second try (#927)

2022-01-16 15:24:24 -09:00

HelpIcon.vue

feat: support require_all property for cookbooks (#1130)

2022-04-03 16:32:58 -08:00

InputColor.vue

Feature/shopping lists second try (#927)

2022-01-16 15:24:24 -09:00

InputLabelType.vue

Feature/shopping lists second try (#927)

2022-01-16 15:24:24 -09:00

InputQuantity.vue

Feature/shopping lists second try (#927)

2022-01-16 15:24:24 -09:00

LanguageDialog.vue

chore: update dev dependencies (#1282)

2022-05-25 09:38:21 -08:00

MarkdownEditor.vue

security: multiple reported CVE fixes (#1515)

2022-07-31 13:10:20 -08:00

RecipeJsonEditor.vue

Fix more typing issues (#928)

2022-01-15 17:38:11 -09:00

ReportTable.vue

Consolidate frontend types (#1245)

2022-05-21 11:22:02 -08:00

SafeMarkdown.vue

security: multiple reported CVE fixes (#1515)

2022-07-31 13:10:20 -08:00

StatsCards.vue

feat: add group statistics on profile page

2022-03-27 15:12:18 -08:00

ToggleState.vue

remove explicity typescript version (#1285)

2022-05-25 10:14:24 -08:00