Linus Rath aa40c8be26 fix: harden proxy auth and SSRF defenses

2026-03-31 17:47:09 +02:00

..

auth

feat: add plugin/theme disable gates and move policy controls to their admin pages

2026-03-25 00:44:04 +01:00

branding

feat: add plugin/theme harness and admin dashboard

2026-03-25 00:44:03 +01:00

change-password

feat: add plugin/theme harness and admin dashboard

2026-03-25 00:44:03 +01:00

login

feat: add plugin/theme harness and admin dashboard

2026-03-25 00:44:03 +01:00

logs

feat: add plugin/theme harness and admin dashboard

2026-03-25 00:44:03 +01:00

marketplace

feat: enforce forced/managed plugins and policy. Split user upload permission

2026-03-27 16:33:17 +01:00

plugins

feat: implemented plugin configuration UI and calendar event action slot

2026-03-30 21:12:05 +02:00

policy

fix: hardened security, CSP enforcement, SSRF redirect validation, reenabled S/MIME chain verify, IP spoofing prevention, PDF iframe sandbox

2026-03-31 15:11:38 +02:00

settings

feat: add support for custom JMAP server endpoints in login and settings

2026-03-29 00:47:35 +01:00

themes

feat: implement force enable/disable functionality for plugins and themes

2026-03-26 18:59:30 +01:00

layout.tsx

fix: harden proxy auth and SSRF defenses

2026-03-31 17:47:09 +02:00

page.tsx

refactor: update styling and color classes across components

2026-03-25 23:11:30 +01:00