maziggy fa6edfbcde Fix stored XSS vulnerabilities and unauthenticated auth toggle ...

- Sanitize project notes with DOMPurify before rendering via
    dangerouslySetInnerHTML (ProjectDetailPage.tsx)
  - Replace hand-rolled HTML sanitizer with DOMPurify in ProjectPageModal
    to prevent attribute injection via crafted 3MF href values
  - Block /api/v1/auth/setup when auth is already enabled to prevent
    unauthenticated clients from disabling authentication remotely

2026-03-15 15:31:49 +01:00

..

__init__.py

Added screenshots

2025-11-28 10:23:59 +01:00

ams_history.py

Fix timestamps off by timezone offset in non-UTC containers (#504)

2026-02-24 08:18:02 +01:00

api_keys.py

Add authentication to 200+ API endpoints (CVE-2026-25505)

2026-02-03 09:13:00 +01:00

archives.py

Fix energy costs not updating per timeframe in statistics (#695)

2026-03-14 10:18:27 +01:00

auth.py

Fix stored XSS vulnerabilities and unauthenticated auth toggle

2026-03-15 15:31:49 +01:00

background_dispatch.py

Add background print dispatching + tests

2026-02-20 08:51:13 +01:00

bug_report.py

Add in-app bug reporting with relay, debug log collection, and privacy controls

2026-03-04 13:33:19 +01:00

camera.py

Fix P2S camera TLS compatibility via OpenSSL proxy (#661)

2026-03-15 11:52:32 +01:00

cloud.py

Fix cloud profiles shared across all users (#665)

2026-03-12 13:02:13 +01:00

discovery.py

Auto-detect subnet for printer discovery

2026-02-08 12:17:20 +01:00

external_links.py

Fix safe security findings: hashlib, log injection, broad excepts

2026-02-06 11:37:59 +01:00

filaments.py

refactor(api): rename /filaments/ to /filament-catalog/ for clarity (#427)

2026-02-18 11:58:17 +01:00

firmware.py

Add authentication to 200+ API endpoints (CVE-2026-25505)

2026-02-03 09:13:00 +01:00

github_backup.py

Fix safe security findings: hashlib, log injection, broad excepts

2026-02-06 11:37:59 +01:00

groups.py

Add inventory:view_assignments permission so admins can grant users

2026-03-07 09:17:26 +01:00

inventory.py

Fix spool assignment applying wrong filament profile (#681)

2026-03-15 09:54:57 +01:00

kprofiles.py

feat: dual external spool support, AMS slot model filtering & pre-population

2026-02-15 08:04:01 +01:00

library.py

Library Upload Doesn't Show New File Until Page Reload ([#704](https://github.com/maziggy/bambuddy/issues/704)) — After uploading a file in the Library file manager, the file list didn't update until the user reloaded the browser. The upload endpoint used db.flush() instead of db.commit(), so the new row was only written to the database *after* the response was sent to the client. The frontend immediately refetched the file list upon receiving the response, but a new database session couldn't see the uncommitted row — resulting in stale data. Fixed by committing before the response is returned. Also fixed the same race condition in folder create, folder update, and file update endpoints. Reported by @shadowjig.

2026-03-15 09:15:18 +01:00

local_presets.py

Add local profiles — import OrcaSlicer presets without Bambu Cloud (#310)

2026-02-09 17:00:02 +01:00

maintenance.py

Fix P2S showing carbon rod maintenance tasks (#640)

2026-03-07 09:45:14 +01:00

metrics.py

feat(metrics): add bambuddy_build_info metric

2026-03-07 15:40:48 +00:00

notification_templates.py

Add email templates and fix Edit User modal

2026-02-10 00:18:33 +00:00

notifications.py

Add first layer complete notification with camera snapshot (#679)

2026-03-13 10:53:21 +01:00

pending_uploads.py

Add explanatory comments to 265 empty except blocks

2026-02-06 11:58:38 +01:00

print_log.py

feat: add print log timeline view in archives page

2026-02-15 13:14:15 +01:00

print_queue.py

Add print metadata to queue API response (#524)

2026-02-26 08:15:38 +01:00

printers.py

Add remote AMS drying controls (#292)

2026-03-12 16:46:10 +01:00

projects.py

Fix archived files counted as printed in project statistics (#630)

2026-03-06 13:32:19 +01:00

settings.py

Add ambient drying mode and fix block mode humidity auto-stop (#292)

2026-03-14 15:06:07 +01:00

smart_plugs.py

Fix naive-vs-aware datetime crash from 0.2.1 timezone migration

2026-02-27 17:39:32 +01:00

spoolbuddy.py

Add SpoolBuddy NFC tag writing with OpenTag3D format

2026-03-02 13:56:15 +01:00

spoolman.py

[Fix]: Update location when linking/unlinking to/from Spoolman (#669)

2026-03-11 09:38:14 +01:00

support.py

Redact printer access codes from support bundle logs

2026-03-15 08:42:17 +01:00

system.py

Fix TS error, add missing translation keys, fix fr locale, cleanup duplicated functions

2026-02-15 14:01:54 +01:00

updates.py

Fix daily build tags falsely triggering update notification

2026-03-13 16:16:28 +01:00

users.py

Removed Trailing Whitespaces

2026-02-10 08:57:09 -05:00

virtual_printers.py

Fix virtual printer proxy mode always defaulting to X1C model

2026-03-13 10:21:46 +01:00

webhook.py

Fix safe security findings: hashlib, log injection, broad excepts

2026-02-06 11:37:59 +01:00

websocket.py

Add background print dispatching + tests

2026-02-20 08:51:13 +01:00