Erik Michelson fbd7307f16 fix(gist-export): validate OAuth2 state and redirect URI ...

The state of the OAuth2 response was not verified.
In theory an attacker could use this to extract the contents of a note.

Co-authored-by: Philip Molares <philip.molares@udo.edu>
Signed-off-by: Erik Michelson <github@erik.michelson.eu>

2026-06-18 23:56:45 +02:00

..

auth

fix(auth): add state parameters and PKCE support

2025-12-05 22:06:30 +01:00

imageRouter

feat(security): sanitize SVG files on upload

2026-02-04 20:27:41 +01:00

middleware

feat(rate-limit): add more config options

2026-06-17 21:08:07 +02:00

note

fix(gist-export): validate OAuth2 state and redirect URI

2026-06-18 23:56:45 +02:00

baseRouter.js

feat(editor): add external link warning page

2026-06-10 20:15:09 +02:00

historyRouter.js

Fix eslint warnings

2019-05-31 00:30:29 +02:00

statusRouter.js

refactor: use user-token for historyDelete too

2025-11-26 19:28:53 +01:00

userRouter.js

fix(user-export): sanitize filenames in zip properly

2022-11-27 20:51:37 +01:00

utils.js

Allow posting new note with content

2018-01-18 10:41:58 +01:00