Maurice e6b4df5213 test(ssrf): pin what a redirect hop may carry across an origin ...

The credential strip and the 303/302 body downgrade are new behaviour in a
security helper, and src/utils sits on a 96% line ratchet that the untested
branches took under.

2026-09-06 15:02:58 +02:00

..

assets

v4.0.0 (#1719)

2026-08-27 13:22:39 +02:00

public

v3.0.16 — bug fixes (#964)

2026-05-06 21:38:40 +02:00

scripts

v4.0.0 (#1719)

2026-08-27 13:22:39 +02:00

src

fix(security): keep the operator's ntfy token in and re-check every redirect hop

2026-09-06 15:02:58 +02:00

tests

test(ssrf): pin what a redirect hop may carry across an origin

2026-09-06 15:02:58 +02:00

.env.example

fix(llm-parse): one configurable ceiling for a model call, and undici honours it

2026-09-04 18:56:22 +02:00

.gitignore

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

.prettierrc

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

CLAUDE.md

feat(plugins): TREK_PLUGINS_IGNORE_TREK_RANGE turns the version gate into a warning (#2226)

2026-09-04 00:43:06 +02:00

eslint.config.mjs

v4.0.0 (#1719)

2026-08-27 13:22:39 +02:00

package.json

feat(plugins): instance-wide settings editor in the admin UI (#2170)

2026-09-01 06:45:24 +02:00

reset-admin.js

v4.0.0 (#1719)

2026-08-27 13:22:39 +02:00

tsconfig.build.json

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

tsconfig.json

v4.0.0 (#1719)

2026-08-27 13:22:39 +02:00

tsconfig.tests.json

v4.0.0 (#1719)

2026-08-27 13:22:39 +02:00

vitest.config.ts

v4.0.0 (#1719)

2026-08-27 13:22:39 +02:00