Juan José Mata 73b6077ac3 Constrain Lunchflow base URL to trusted endpoint (#1768) ...

* Constrain Lunchflow base URL to trusted endpoint

Prevent SSRF by ignoring user-provided Lunchflow base_url values unless they match the canonical Lunchflow HTTPS endpoint. Add model tests covering invalid host/scheme and valid canonicalization behavior.

* Linter

2026-05-12 12:18:17 +02:00

..

assets

refactor(design-system): extend DS::Alert and migrate 9 inline alert blocks (#1731)

2026-05-10 17:14:06 +02:00

channels/application_cable

Report ActionCable errors to Sentry

2025-03-17 17:26:19 -04:00

components

fix(design-system): DS::Alert alignment, accessibility, and hierarchy polish (#1734)

2026-05-11 23:29:05 +02:00

controllers

feat(recurring): allow marking transfers as recurring (#895) (#1589)

2026-05-12 00:37:47 +02:00

data_migrations

Additional cache columns on balances for activity view breakdowns (#2505)

2025-07-23 10:06:25 -04:00

helpers

feat(providers): add Kraken exchange sync (#1759)

2026-05-12 00:22:37 +02:00

javascript

Bank Sync cleanup (#1710)

2026-05-10 22:13:57 +02:00

jobs

Bank Sync cleanup (#1710)

2026-05-10 22:13:57 +02:00

mailers

Add scheduled DemoFamilyRefreshJob to rebuild demo data daily (#1217)

2026-03-17 19:41:26 +01:00

middleware

feat: comprehensive SSO/OIDC upgrade with enterprise features

2026-01-03 17:56:42 -05:00

models

Constrain Lunchflow base URL to trusted endpoint (#1768)

2026-05-12 12:18:17 +02:00

policies

Family sharing (#1272)

2026-03-25 10:50:23 +01:00

services

Remove Flipper and replace with ENV-driven FeatureFlags (#957)

2026-02-10 23:30:45 +01:00

views

feat(recurring): allow marking transfers as recurring (#895) (#1589)

2026-05-12 00:37:47 +02:00