Hayden 13850cda1f security: multiple reported CVE fixes (#1515) ... * update out of date license * update typing / refactor * fix arbitrarty path injection * use markdown sanatizer to prevent XSS CWE-79 * fix CWE-918 SSRF by validating url and mime type * add security docs * update recipe-scrapers * resolve DOS from arbitrary url * update changelog * bump version * add ref to #1506 * add #1511 to changelog * use requests decoder * actually fix encoding issue		2022-07-31 13:10:20 -08:00
..
Admin	chore: update dev dependencies (#1282)	2022-05-25 09:38:21 -08:00
Group	hotfix: tame typescript beast	2022-06-20 16:48:39 -08:00
Recipe	security: multiple reported CVE fixes (#1515)	2022-07-31 13:10:20 -08:00
ShoppingList	fix: shopping list label editor (#1333)	2022-06-02 09:12:05 -08:00
User	Feature/group based notifications (#918)	2022-01-09 21:04:24 -09:00