All pull requests

Pull requests

• security: force plain text for executable upload content types

  #678·obaidur-dev opened Nov 2, 2026·

  ·

• security: restrict redirects to the instance host

  #677·obaidur-dev opened Nov 2, 2026·

  ·

• security: bind media paths and validate upload codes

  #676·obaidur-dev opened Nov 2, 2026·

  ·

• security: reject failed reCAPTCHA verifications

  #675·obaidur-dev opened Nov 2, 2026·

  ·

• Fix stored XSS through the admin raw media route

  #673·parenthesis0407 opened Oct 19, 2026·

  ·

• Bump postcss from 8.5.15 to 8.5.25 in /docs

  dependenciesjavascript
  #669·dependabot[bot] opened Aug 1, 2026Bot·

  ·

• Bump postcss from 8.5.15 to 8.5.25 in /core

  dependenciesjavascript
  #668·dependabot[bot] opened Aug 1, 2026Bot·

  ·