Deluan 0a4722802a fix(subsonic): validate JSONP callback parameter ... Added validation to ensure the JSONP callback parameter is a valid JavaScript identifier before reflecting it into the response. Invalid callbacks now return a JSON error response instead. This prevents malicious input from being injected into the response body via the callback parameter.		2026-02-08 10:33:46 -05:00
..
backgrounds	feat(ui): use webp for login backgrounds	2025-03-06 23:32:52 -05:00
events	feat: Multi-library support (#4181)	2025-07-18 18:41:12 -04:00
nativeapi	refactor: run Go modernize (#5002)	2026-02-08 09:57:30 -05:00
public	fix: don't expose JWT-related errors (#4892)	2026-01-16 06:20:10 -05:00
subsonic	fix(subsonic): validate JSONP callback parameter	2026-02-08 10:33:46 -05:00
testdata	fix(server): improve error message for encrypted TLS private keys (#4742)	2025-11-28 17:08:34 -05:00
auth.go	refactor: run Go modernize (#5002)	2026-02-08 09:57:30 -05:00
auth_test.go	refactor: run Go modernize (#5002)	2026-02-08 09:57:30 -05:00
initial_setup.go	chore(server): add logs to begin/end transaction	2025-02-24 19:13:42 -05:00
initial_setup_test.go	Upgrade Ginkgo to V2	2022-07-26 16:53:17 -04:00
middlewares.go	refactor: run Go modernize (#5002)	2026-02-08 09:57:30 -05:00
middlewares_test.go	feat(ui): show user's lastAccess (#3342)	2024-09-30 20:46:10 -04:00
serve_index.go	refactor: run Go modernize (#5002)	2026-02-08 09:57:30 -05:00
serve_index_test.go	feat(ui): implement new event stream connection logic	2025-06-29 10:18:05 -04:00
server.go	refactor: run Go modernize (#5002)	2026-02-08 09:57:30 -05:00
server_suite_test.go	Rename log.LevelCritical to log.LevelFatal	2022-12-21 14:53:36 -05:00
server_test.go	feat(plugins): New Plugin System with multi-language PDK support (#4833)	2026-01-14 19:22:48 -05:00