naturallaw777 pushed to staging-dev at Sovran_Systems/Sovran_SystemsOS 2026-08-07 15:02:26 -05:00
de481db97c Merge pull request #396 from naturallaw777/fix/exception-exposure-5351
9051aed737 fix: sanitize exception handling in verify-integrity and security-reset (CWE-209)
Compare 2 commits »
naturallaw777 pushed to staging-dev at Sovran_Systems/Sovran_SystemsOS 2026-08-07 14:49:11 -05:00
65376ec8fb Merge pull request #395 from naturallaw777/fix/exception-exposure-5252
899f570ded fix: sanitize api_security_reset errors to prevent exception information exposure (CWE-209)
Compare 2 commits »
naturallaw777 pushed to staging-dev at Sovran_Systems/Sovran_SystemsOS 2026-08-07 14:25:55 -05:00
d3b41b14fb Merge pull request #394 from naturallaw777/fix/path-injection-4338
56db634900 fix: use canonical prefix containment check for CodeQL path-injection
3522270373 fix: pass sanitized abs_path to os.chown to resolve CodeQL path injection at 4338
Compare 3 commits »
naturallaw777 pushed to staging-dev at Sovran_Systems/Sovran_SystemsOS 2026-08-07 13:53:28 -05:00
efda70c187 Merge pull request #393 from naturallaw777/fix/path-injection-4334-4532
a32b353eda fix: resolve merge conflict with origin/main in server.py
4555764d87 fix: add CodeQL-recognized path sanitization for domain_name
Compare 3 commits »
naturallaw777 pushed to staging-dev at Sovran_Systems/Sovran_SystemsOS 2026-08-07 13:41:44 -05:00
c38d4be851 Merge pull request #392 from naturallaw777/fix/path-injection-4334-4532
5130076400 fix: add CodeQL-recognized path sanitization for domain_name
Compare 2 commits »
naturallaw777 pushed to staging-dev at Sovran_Systems/Sovran_SystemsOS 2026-08-07 13:30:21 -05:00
1dbbd6a943 Merge pull request #391 from naturallaw777/fix/njalla-sentinel-4371
f0a640519d fix: remove domain substring check for CodeQL incomplete-url
Compare 2 commits »
naturallaw777 pushed to staging-dev at Sovran_Systems/Sovran_SystemsOS 2026-08-07 13:09:27 -05:00
a14ef03d40 fix: use sentinel for njalla header check (CodeQL incomplete-url-substring)
naturallaw777 pushed to staging-dev at Sovran_Systems/Sovran_SystemsOS 2026-08-07 13:05:38 -05:00
a0cc7e6bec Merge pull request #390 from naturallaw777/fix/xss-lnurl-qr-print-5013
1ecf245a07 fix: prevent reflected XSS in lnurl-qr print endpoint
Compare 2 commits »
naturallaw777 pushed to staging-dev at Sovran_Systems/Sovran_SystemsOS 2026-08-07 12:45:07 -05:00
f8730cc0ab Merge pull request #389 from naturallaw777/fix/clear-text-root-password
8a766181de fix: hash root password instead of storing in clear text (CWE-312)
bd0d2cd812 removed temp patch file
Compare 3 commits »
naturallaw777 pushed to staging-dev at Sovran_Systems/Sovran_SystemsOS 2026-08-07 12:14:03 -05:00
dc68a477b6 removed temp patch file
592f2bd12f fix: separate web auth hash from system password file
Compare 2 commits »
naturallaw777 pushed to staging-dev at Sovran_Systems/Sovran_SystemsOS 2026-08-07 11:59:37 -05:00
b7bba228fe Merge pull request #387 from naturallaw777/fix/matrix-hub-service-admin
3010557064 Fix Matrix Hub admin API credentials
69f64c18d1 Merge pull request #386 from naturallaw777/copilot/fix-code-scanning-alerts
942da64332 Fix CWE-78: replace subprocess call with Synapse Admin API in create-user endpoint
bae790ebb4 Initial plan
Compare 5 commits »
naturallaw777 pushed to staging-dev at Sovran_Systems/Sovran_SystemsOS 2026-08-07 10:02:54 -05:00
501c5abe64 docs: add SECURITY.md detailing security policy and best practices
naturallaw777 deleted branch main from Sovran_Systems/Sovran_SystemsOS 2026-08-05 19:51:02 -05:00
naturallaw777 pushed to stable at Sovran_Systems/Sovran_SystemsOS 2026-08-05 13:58:01 -05:00
63f1069e4a Merge pull request #385 from naturallaw777/arena/019fd2b5-sovran-systemsos
f2842ffafb docs: versioned CDN downloads + add CDN upload script
591ae766d2 Merge pull request #384 from naturallaw777/arena/019fd28e-sovran-systemsos
f81b27cc19 iso: fix replaceStrings length mismatch in cleanVersion
Compare 4 commits »
naturallaw777 pushed to staging-dev at Sovran_Systems/Sovran_SystemsOS 2026-08-05 13:56:34 -05:00
63f1069e4a Merge pull request #385 from naturallaw777/arena/019fd2b5-sovran-systemsos
f2842ffafb docs: versioned CDN downloads + add CDN upload script
Compare 2 commits »
naturallaw777 pushed to staging-dev at Sovran_Systems/Sovran_SystemsOS 2026-08-05 10:39:15 -05:00
591ae766d2 Merge pull request #384 from naturallaw777/arena/019fd28e-sovran-systemsos
f81b27cc19 iso: fix replaceStrings length mismatch in cleanVersion
Compare 2 commits »
naturallaw777 pushed to stable at Sovran_Systems/Sovran_SystemsOS 2026-08-04 19:53:25 -05:00
dda6fb8e91 Merge pull request #383 from naturallaw777/arena/019fcf25-sovran-systemsos
cf250604f9 Promote virtual machine trial option in README
963d41f1ed Merge pull request #382 from naturallaw777/arena/019fce1d-sovran-systemsos
5188cca9aa Improve installer VM compatibility
Compare 4 commits »
naturallaw777 pushed to staging-dev at Sovran_Systems/Sovran_SystemsOS 2026-08-04 19:43:57 -05:00
dda6fb8e91 Merge pull request #383 from naturallaw777/arena/019fcf25-sovran-systemsos
cf250604f9 Promote virtual machine trial option in README
Compare 2 commits »
naturallaw777 pushed to staging-dev at Sovran_Systems/Sovran_SystemsOS 2026-08-04 14:09:08 -05:00
963d41f1ed Merge pull request #382 from naturallaw777/arena/019fce1d-sovran-systemsos
5188cca9aa Improve installer VM compatibility
Compare 2 commits »
naturallaw777 pushed to stable at Sovran_Systems/Sovran_SystemsOS 2026-08-04 13:31:59 -05:00
f39f59fb81 Merge pull request #381 from naturallaw777/arena/019fcde4-sovran-systemsos
61fc61cceb Trim redundant dev-vs-stable Gitea explanations in README
4b9800aef3 Merge pull request #380 from naturallaw777/arena/019fcdbe-sovran-systemsos
c447674ef9 docs: correct active development workflow
a77bfc5070 Merge pull request #379 from naturallaw777/arena/019fcda3-sovran-systemsos
Compare 19 commits »