HemmeligOrg/Hemmelig.app v3.6.0

Brush your teeth

on GitHub

14c9c39 - fix: reset the enable password on new secret
f9c0b0e - style: add mobile css workaround for the secret creation layout
c5975c2 - chore: change the layout and position for the share button
4e1b3a4 - fix: embarrasing bug
415cb56 - feat: add share of the url
075e6f3 - security: set the max file size to the multipart middleware
bdb0984 - chore: make more use of the redux sign in
be76006 - chore: remove unused func
3698ae0 - security: make the password part of the encryption and decryption key if it is defined
24904cb - chore: remove the basic auth logic which is not used
88b683d - chore: run the owasp zap once a day
811d9a1 - fix: typo
6443dd4 - fix(code-smell): declare getRandomADjective as a const
fb32da7 - fix(code-smell): isLoggedIn does not need to use useState
ec60744 - fix(code-smell): do not assign the upload to a variable and wrap it in a try catch
cfb468e - chore: let non account users download files
55d0160 - security: remove the LFI hack, and change the approach of how a file is uploaded
e0f7a1e - Revert "security: update the LFI check to sanitize the filename before passing it to the folder check"
9827b9a - security: update the LFI check to sanitize the filename before passing it to the folder check
7e45d84 - security: prevent LFI if the disk adapter is being used
f8754fb - docs: update the DO env vars with s3 to the explanation
396eb98 - feat: set an env variable to override the file size allowed to be uploaded