eric/apprise-forge-notifications
Watch
1
0
Fork
You've already forked apprise-forge-notifications
 0
Code Issues Pull requests Projects Releases 5 Packages 1 Wiki Activity Actions
5 releases 9 tags
  • 1.5.6 8f8567a97c

    1.5.6
    All checks were successful
    Build and Publish Docker Image / test (push) Successful in 22s
    Details
    Build and Publish Docker Image / build-and-push (push) Successful in 14s
    Details
    Stable

    eric released this 2026-07-02 10:04:47 -07:00 | 1 commits to main since this release

    v1.5.6 - Security hardening

    Fixes from the 5th security audit. Malformed/attacker input that used to trigger HTTP 500 now returns a proper 4xx. No auth bypass existed — all crash paths already failed closed. Drop-in upgrade, no config changes.

    • Non-ASCII Authorization / X-*-Signature headers → 403 (was 500)
    • Deeply-nested JSON → 400 (was 500)
    • Non-object / type-confused JSON payloads → 400 (was 500), across all 24 formatters
    • Log injection hardened: control chars in X-*-Delivery, event-type, and Apprise response bodies are escaped before logging
    • 10 regression tests added; suite 140 passing
    Downloads