rcourtman beae4c860c fix: address 6 security and reliability issues ...

Security fixes:
- Auto-register now requires settings:write scope for API tokens
- X-Forwarded-For in auto-register only trusted from verified proxies
- Public URL capture requires authentication (no loopback bypass)
- Lockout reset now uses RequireAdmin for session users

Reliability fixes:
- Docker stop command expiration clears PendingUninstall flag
- Cancelled notifications get completed_at set and are cleaned up

2026-02-03 17:32:44 +00:00

..

concurrency_test.go

Fix settings security tab navigation

2025-10-11 23:29:47 +00:00

email_enhanced_test.go

fix: negotiate SMTP auth mechanism from server capabilities. Related to #1165

2026-02-02 11:36:00 +00:00

email_enhanced.go

fix: negotiate SMTP auth mechanism from server capabilities. Related to #1165

2026-02-02 11:36:00 +00:00

email_providers.go

chore: remove more dead code

2025-11-27 00:10:55 +00:00

email_template_test.go

test: Add singleAlertTemplate type coverage tests

2025-12-02 13:45:49 +00:00

email_template.go

refactor: replace deprecated strings.Title with custom titleCase

2025-11-27 09:22:52 +00:00

notification_utils_test.go

style: Apply gofmt to 37 files

2025-12-02 17:21:48 +00:00

notifications_additional_test.go

test: expand backend coverage

2026-01-25 21:08:44 +00:00

notifications_test.go

fix(test): disable email in TestSendResolvedAlert to avoid retry delays

2026-01-20 18:29:29 +00:00

notifications.go

Fix security vulnerabilities and critical bugs

2026-02-03 17:16:27 +00:00

queue_test.go

test: Add UpdateStatus not found test for notifications package

2025-12-02 14:26:17 +00:00

queue.go

fix: address 6 security and reliability issues

2026-02-03 17:32:44 +00:00

security_utils_test.go

test: Add edge case for extractTelegramChatID URL parse error

2025-12-02 00:31:50 +00:00

templates_test.go

fix(frontend): extend kiosk mode to Docker and Hosts pages

2026-01-11 12:16:20 +00:00

webhook_allowlist_test.go

test: Add ValidateWebhookURL edge case tests for notifications package

2025-12-02 13:41:34 +00:00

webhook_client_test.go

test: Add secure webhook client tests for redirect handling

2025-12-02 10:26:34 +00:00

webhook_enhanced_test.go

test: improve coverage for API, AI, Alerts, and Frontend Utils

2026-01-20 15:52:39 +00:00

webhook_enhanced.go

security: fix webhook SSRF, rate limit spoofing, metrics retention, and url poisoning

2026-02-03 16:58:13 +00:00

webhook_retry_test.go

Add unit tests for isRetryableWebhookError (internal/notifications)

2025-11-30 22:03:26 +00:00

webhook_templates.go

feat: Add mention support for webhook alerts. Related to #1118

2026-01-18 15:16:37 +00:00