Maurice 502a3fd4e8 fix(shared): express the URL scheme check without a control-character regex ...

Same behaviour, and the root lint job stops failing on no-control-regex. The
stripping is the point and has to stay: browsers drop everything at or below
U+0020 before they resolve a scheme, so a tab spliced into 'javascript:' is
still a javascript: URL to them.

2026-08-23 11:59:12 +02:00

..

admin

feat(shared): extend the admin request contracts

2026-08-02 15:07:23 +02:00

airport

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

airtrail

v3.4.0 (#1540)

2026-07-18 22:13:52 +02:00

appearance

Comprehensive mobile UI rewrite + desktop Vacay & Journey redesign (#1577)

2026-07-20 20:44:12 +02:00

assignment

api: PUT /assignments/:id/transport gains direction (outgoing|incoming)

2026-08-12 09:08:47 +02:00

atlas

feat(atlas): search by place, and count cities that are actually cities (#1908)

2026-08-12 14:14:37 +02:00

auth

fix(server): tidy passkey quirks after the DI fold

2026-08-02 10:28:22 +02:00

backup

v3.1.1 bug fixes (#1228)

2026-06-18 20:13:30 +02:00

book

fix(shared,tests): bound the book contract and close the gaps that hid all this

2026-08-23 11:59:12 +02:00

budget

fix(budget): name the category parking and file parking bookings in it

2026-08-21 14:28:53 +02:00

category

fix(map): stop untrusted values reaching the marker HTML (#1820)

2026-08-07 13:43:38 +02:00

collab

feat(shared): make collab note optional fields nullable in the request contracts

2026-07-27 00:27:06 +02:00

collection

fix(places): pin the image and website URL fields on the way in

2026-08-16 21:57:21 +02:00

common

v3.1.1 bug fixes (#1228)

2026-06-18 20:13:30 +02:00

config

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

day

fix(shared,tests): bound the book contract and close the gaps that hid all this

2026-08-23 11:59:12 +02:00

file

feat(shared): add fileUploadRequestSchema for the files upload body

2026-07-26 23:19:04 +02:00

i18n

i18n: the English left in Costs, Studio and the mobile timeline

2026-08-23 11:59:12 +02:00

journey

feat(journey): let a shared journey read newest-first

2026-08-18 22:24:29 +02:00

maps

feat(maps): bill a place search as one session instead of per keystroke

2026-08-14 23:42:51 +02:00

memories

fix(server): hold DELETE bodies to the same contract as every other write

2026-08-23 11:59:12 +02:00

notification

feat(server): validate notification request bodies

2026-08-02 11:36:36 +02:00

oauth

v3.1.1 bug fixes (#1228)

2026-06-18 20:13:30 +02:00

oidc

feat(oidc): honor remember-me in SSO login (#1927)

2026-08-15 22:48:03 +02:00

packing

feat(server): adopt zod DTOs for the packing body contracts

2026-07-26 16:55:53 +02:00

place

fix(places): pin the image and website URL fields on the way in

2026-08-16 21:57:21 +02:00

realtime

fix(shared,tests): bound the book contract and close the gaps that hid all this

2026-08-23 11:59:12 +02:00

reservation

fix(shared): express the URL scheme check without a control-character regex

2026-08-23 11:59:12 +02:00

sanitize

v3.1.1 bug fixes (#1228)

2026-06-18 20:13:30 +02:00

settings

v3.1.1 bug fixes (#1228)

2026-06-18 20:13:30 +02:00

share

v3.1.1 bug fixes (#1228)

2026-06-18 20:13:30 +02:00

storage

Feat/storage driver (#1949)

2026-08-22 11:33:55 +02:00

system-notice

feat(notices): add the 4.0.0 release modal

2026-08-22 15:48:13 +02:00

tag

v3.1.1 bug fixes (#1228)

2026-06-18 20:13:30 +02:00

todo

fix(shared): align todo contracts with the wire format the client sends

2026-07-26 14:54:53 +02:00

trip

feat(server): expose the active trip as its own endpoint

2026-08-08 23:01:40 +02:00

trip-invite

feat(server): adopt zod DTOs for the trip-invite body contracts

2026-07-26 18:21:18 +02:00

vacay

feat(server): adopt zod DTOs for the vacay body contracts

2026-07-27 18:39:47 +02:00

weather

v3.1.1 bug fixes (#1228)

2026-06-18 20:13:30 +02:00

index.ts

Feat/storage driver (#1949)

2026-08-22 11:33:55 +02:00

plugin-permissions.ts

Make the plugin permission facts live in one place

2026-08-09 00:52:05 +02:00