Marc-André Bombeck 2480c9fa55 fix(notifications): refuse encoded and path-borne secrets in replies ...

Userinfo and each query value are decoded on their own, so one malformed escape no longer discards every other secret in the URL. A reply is compared with each secret in literal, JSON-escaped and percent-encoded form, and URL path segments of 16 or more characters count as secrets, which covers the token in a Discord or Slack webhook URL and an n8n webhook id.

Refs #947

2026-09-13 14:50:33 +02:00

..

__tests__

fix(notifications): refuse encoded and path-borne secrets in replies

2026-09-13 14:50:33 +02:00

senders

fix(notifications): name TLS, protocol and envelope faults in email tests

2026-09-13 14:50:33 +02:00

channel-state.ts

refactor(v1.4.15): apply simplify-review safe suggestions

2026-05-09 22:14:43 +02:00

client-managed-apns.ts

fix(notifications): scope client-managed suppression to the APNs leg

2026-07-27 14:26:20 +02:00

delegated-intake.ts

Stop a delegate deferring somebody else's medication reminders

2026-08-04 12:30:01 +02:00

delivery-identity.ts

fix(02-11): release guardian lock before provider egress

2026-08-06 13:46:42 +02:00

dispatch-localised.ts

feat(i18n): add Korean as a seventh end-to-end locale

2026-08-26 16:42:45 +09:00

dispatcher.ts

fix(notifications): apply the global channel switches at dispatch

2026-09-03 02:02:04 +02:00

dose-tag.ts

feat(notifications): strengthen the Web Push path for PWA-only self-hosters

2026-06-18 11:39:55 +02:00

egress-policy.ts

fix(egress): keep loopback grantable under an exact operator origin

2026-09-10 19:08:04 +02:00

event-labels.ts

Give every notification event type words to render

2026-08-03 09:51:53 +02:00

managed-delivery.ts

feat(02-11): secure guardian notification delivery

2026-08-06 05:44:41 +02:00

medication-intake-sync.ts

feat(notifications): coalesce the intake sync push per user and strip its payload

2026-07-07 10:21:53 +02:00

reminder-dedup.ts

Send the offline-geo admin notice once per configuration state

2026-08-29 19:20:33 +02:00

retry-policy.ts

feat(notifications): keep what the relay answered on a failed send

2026-09-13 14:04:40 +02:00

strip-emoji.ts

fix(notifications): strip emoji from routine reminder push content

2026-06-06 16:27:59 +02:00

strip-html.ts

Centralise notification HTML stripping behind one hardened helper

2026-08-29 19:20:42 +02:00

test-delivery-failure.ts

fix(notifications): record a relay refusal at warn, not error

2026-09-13 14:50:32 +02:00

types.ts

feat(notifications): add a Gotify payload format to the webhook

2026-09-13 14:19:48 +02:00

upstream-body.ts

fix(notifications): refuse encoded and path-borne secrets in replies

2026-09-13 14:50:33 +02:00

vapid-config.ts

fix(notifications): drop the unreachable WEB_PUSH_* VAPID aliases

2026-09-03 02:12:44 +02:00

web-push-clear.ts

fix(notifications): dial Web Push through the pinned dispatcher

2026-07-19 14:31:25 +02:00