Trenton H dda05a7c00

Security: Improve overall security in a few ways (#12501) ...

- Make sure we're always using regex with timeouts for user controlled data
- Adds rate limiting to the token endpoint (configurable)
- Signs the classifier pickle file with the SECRET_KEY and refuse to load one which doesn't verify.
- Require the user to set a secret key, instead of falling back to our old hard coded one

2026-04-02 15:30:26 -07:00

..

management

Feature: Replace Whoosh with tantivy search backend (#12471)

2026-04-02 12:38:22 -07:00

migrations

Feature: Replace Whoosh with tantivy search backend (#12471)

2026-04-02 12:38:22 -07:00

plugins

Security: Improve overall security in a few ways (#12501)

2026-04-02 15:30:26 -07:00

resources

Logs the errors during thumbnail generation, updates default to be WebP

2023-09-12 12:16:22 -07:00

search

Feature: Replace Whoosh with tantivy search backend (#12471)

2026-04-02 12:38:22 -07:00

signals

Feature: Replace Whoosh with tantivy search backend (#12471)

2026-04-02 12:38:22 -07:00

static

Chore(deps): Bump bootstrap from 5.3.7 to 5.3.8 in /src-ui (#10740)

2025-09-03 21:58:53 +00:00

templates

Chore: logger, response and template sanitization cleanup (#12439)

2026-03-26 07:36:02 -07:00

templating

Merge branch 'main' into dev

2026-03-04 13:31:20 -08:00

tests

Security: Improve overall security in a few ways (#12501)

2026-04-02 15:30:26 -07:00

workflows

Chore: logger, response and template sanitization cleanup (#12439)

2026-03-26 07:36:02 -07:00

__init__.py

Breaking: Remove support for document and thumbnail encryption (#11850)

2026-01-24 19:29:54 -08:00

admin.py

Feature: Replace Whoosh with tantivy search backend (#12471)

2026-04-02 12:38:22 -07:00

apps.py

Enhancement: “live” document updates (#12141)

2026-03-04 00:27:07 +00:00

barcodes.py

Security: Improve overall security in a few ways (#12501)

2026-04-02 15:30:26 -07:00

bulk_download.py

Chore: Reduce imports for a slight memory improvement (#9217)

2025-02-24 15:06:14 -08:00

bulk_edit.py

Feature: Replace Whoosh with tantivy search backend (#12471)

2026-04-02 12:38:22 -07:00

caching.py

Feature: Paperless AI (#10319)

2026-01-13 16:24:42 +00:00

checks.py

Chore: Drop old signal and unneeded apps, transition to parser registry instead (#12405)

2026-03-22 06:53:32 -07:00

classifier.py

Security: Improve overall security in a few ways (#12501)

2026-04-02 15:30:26 -07:00

conditionals.py

Breaking: Drop support for Python 3.10 (#12234)

2026-03-04 15:03:33 -08:00

consumer.py

Feature: Transition all checksums to use SHA256 (#12432)

2026-03-26 11:28:02 -07:00

context_processors.py

Enhancement: allow webUI first account signup (#9500)

2025-03-29 17:12:34 +00:00

converters.py

Chore: Standardize subprocess running and logging (#6275)

2024-04-04 13:11:43 -07:00

data_models.py

Feature: document file versions (#12061)

2026-02-26 16:46:54 +00:00

double_sided.py

Chore: Drop Python 3.9 support (#7774)

2024-09-26 12:22:24 -07:00

file_handling.py

Fix: correct doc version filename handling (#12223)

2026-03-04 23:28:07 +00:00

filters.py

Feature: document file versions (#12061)

2026-02-26 16:46:54 +00:00

loggers.py

Chore(mypy): Annotate None returns for typing improvements (#11213)

2026-02-02 08:44:12 -08:00

mail.py

Fixhancement: refactor email attachment logic (#11336)

2025-11-14 17:28:46 +00:00

matching.py

Fix: use effective content for matching and suggestion content (#12293)

2026-03-10 23:45:56 +00:00

models.py

Feature: Replace Whoosh with tantivy search backend (#12471)

2026-04-02 12:38:22 -07:00

parsers.py

Chore: Drop old signal and unneeded apps, transition to parser registry instead (#12405)

2026-03-22 06:53:32 -07:00

permissions.py

Fix more typing failures

2026-02-16 09:37:33 -08:00

regex.py

Security: Improve overall security in a few ways (#12501)

2026-04-02 15:30:26 -07:00

sanity_checker.py

Feature: Replace Whoosh with tantivy search backend (#12471)

2026-04-02 12:38:22 -07:00

schema.py

Feature: openapi spec, full api browser (#8948)

2025-02-10 16:43:07 +00:00

serialisers.py

Feature: Replace Whoosh with tantivy search backend (#12471)

2026-04-02 12:38:22 -07:00

settings.py

Feature: Allow encrypting sensitive fields in export (#6927)

2024-06-09 14:41:18 +00:00

tasks.py

Feature: Replace Whoosh with tantivy search backend (#12471)

2026-04-02 12:38:22 -07:00

utils.py

Feature: Replace Whoosh with tantivy search backend (#12471)

2026-04-02 12:38:22 -07:00

validators.py

Enhancement: use charfield for webhook url, custom validation (#9128)

2025-02-16 14:26:30 -08:00

versioning.py

Breaking: Drop support for Python 3.10 (#12234)

2026-03-04 15:03:33 -08:00

views.py

Feature: Replace Whoosh with tantivy search backend (#12471)

2026-04-02 12:38:22 -07:00