This repository has been archived on 2024-05-31. You can view files and clone it, but cannot push or open issues or pull requests.

Jens L b0fbd576fc security: cure53 fix (#6039) ... * ATH-01-001: resolve path and check start before loading blueprints This is even less of an issue since 411ef239f6, since with that commit we only allow files that the listing returns Signed-off-by: Jens Langhammer <jens@goauthentik.io> * ATH-01-010: fix missing user filter for webauthn device This prevents an attack that is only possible when an attacker can intercept HTTP traffic and in the case of HTTPS decrypt it. * ATH-01-008: fix web forms not submitting correctly when pressing enter When submitting some forms with the Enter key instead of clicking "Confirm"/etc, the form would not get submitted correctly This would in the worst case is when setting a user's password, where the new password can end up in the URL, but the password was not actually saved to the user. * ATH-01-004: remove env from admin system endpoint this endpoint already required admin access, but for debugging the env variables are used very little Signed-off-by: Jens Langhammer <jens@goauthentik.io> * ATH-01-003 / ATH-01-012: disable htmlLabels in mermaid Signed-off-by: Jens Langhammer <jens@goauthentik.io> * ATH-01-005: use hmac.compare_digest for secret_key authentication Signed-off-by: Jens Langhammer <jens@goauthentik.io> * ATH-01-009: migrate impersonation to use API Signed-off-by: Jens Langhammer <jens@goauthentik.io> * ATH-01-010: rework Signed-off-by: Jens Langhammer <jens@goauthentik.io> * ATH-01-014: save authenticator validation state in flow context Signed-off-by: Jens Langhammer <jens@goauthentik.io> bugfixes Signed-off-by: Jens Langhammer <jens@goauthentik.io> * ATH-01-012: escape quotation marks Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add website Signed-off-by: Jens Langhammer <jens@goauthentik.io> * update release ntoes Signed-off-by: Jens Langhammer <jens@goauthentik.io> * update with all notes Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix format Signed-off-by: Jens Langhammer <jens@goauthentik.io> --------- Signed-off-by: Jens Langhammer <jens@goauthentik.io>		2023-06-22 22:25:04 +02:00
..
ldap	providers/ldap: improve password totp detection (#6006)	2023-06-20 12:09:13 +02:00
oauth2	web: Replace lingui.js with lit-localize (#5761)	2023-06-02 08:08:36 -07:00
proxy	web: Replace lingui.js with lit-localize (#5761)	2023-06-02 08:08:36 -07:00
radius	web: Replace lingui.js with lit-localize (#5761)	2023-06-02 08:08:36 -07:00
saml	security: cure53 fix (#6039)	2023-06-22 22:25:04 +02:00
scim	web: Replace lingui.js with lit-localize (#5761)	2023-06-02 08:08:36 -07:00
ProviderListPage.ts	web: Replace lingui.js with lit-localize (#5761)	2023-06-02 08:08:36 -07:00
ProviderViewPage.ts	web/admin: fix radius provider page (#5651)	2023-05-17 10:56:24 +02:00
ProviderWizard.ts	web: Replace lingui.js with lit-localize (#5761)	2023-06-02 08:08:36 -07:00
RelatedApplicationButton.ts	web: Replace lingui.js with lit-localize (#5761)	2023-06-02 08:08:36 -07:00