Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Zed 44b2f096f6 Fix SSRF in /video proxy and API JSON injection ... Validate the target host on the /video media route with isTwitterUrl() (mirroring /pic) and reject non-http(s) schemes, and stop the media proxy following redirects off the validated host. JSON-escape user-controlled GraphQL cursors and build id variables with packedjson so untrusted input can't break out of the query. Warn on startup when the insecure default hmacKey is in use. Fixes #1411		2026-06-18 15:01:48 +02:00
..
base.py	Add new media grid and gallery views	2026-03-15 09:31:55 +01:00
poetry.lock	Update and speed up GitHub workflows (#1368)	2026-02-19 06:56:20 +01:00
poetry.toml	Update and speed up GitHub workflows (#1368)	2026-02-19 06:56:20 +01:00
pyproject.toml	Update and speed up GitHub workflows (#1368)	2026-02-19 06:56:20 +01:00
requirements.txt	Update and speed up GitHub workflows (#1368)	2026-02-19 06:56:20 +01:00
test_about_account.py	Add /<acc>/about tests	2026-06-05 23:54:39 +02:00
test_article.py	Add Twitter Article rendering	2026-06-16 15:47:13 +02:00
test_card.py	Update tests	2026-06-10 06:20:08 +02:00
test_community.py	Add support for Communities	2026-06-18 13:32:20 +02:00
test_profile.py	Add username validation	2025-11-30 04:12:38 +01:00
test_quote.py	Update tests	2025-11-16 06:04:46 +01:00
test_search.py	Fix everything (#927)	2023-07-10 11:25:34 +02:00
test_security.py	Fix crash on malformed request paths	2026-06-08 06:14:18 +02:00
test_ssrf_1411.nim	Fix SSRF in /video proxy and API JSON injection	2026-06-18 15:01:48 +02:00
test_thread.py	Update tests	2026-06-05 22:26:41 +02:00
test_timeline.py	Add new media grid and gallery views	2026-03-15 09:31:55 +01:00
test_tweet.py	Update tests	2026-06-05 22:26:41 +02:00
test_tweet_media.py	Update tests	2026-06-05 22:26:41 +02:00