Maurice e6b4df5213 test(ssrf): pin what a redirect hop may carry across an origin ...

The credential strip and the 303/302 body downgrade are new behaviour in a
security helper, and src/utils sits on a 96% line ratchet that the untested
branches took under.

2026-09-06 15:02:58 +02:00

..

e2e

fix(budget): an expense with no payer creates no debt

2026-09-04 12:15:38 +02:00

fixtures

v3.4.0 (#1540)

2026-07-18 22:13:52 +02:00

helpers

feat(studio): filter photos by entry, upload from Studio, and switch stops off

2026-09-03 10:47:08 +02:00

integration

fix(oauth): accept private-use redirect schemes and loopback ports

2026-09-04 12:15:53 +02:00

unit

test(ssrf): pin what a redirect hop may carry across an origin

2026-09-06 15:02:58 +02:00

websocket

refactor(server): shrink the seam bridges to their live exports

2026-08-11 16:23:46 +02:00

setup.console-noise.ts

refactor(server): fold airports and distance, drop the boot-time backfill cycle (#1834)

2026-08-07 21:07:14 +02:00

setup.ts

Finish the contract ratchet, the upload bridge and the client leftovers

2026-08-10 19:54:46 +02:00