kevinveenbirkenbachandClaude Opus 5.5 517d40484e test(mail): select autoescape for the rendered alarm script ...

The unit test of the alarm script built its Jinja environment with
autoescape switched off, which code scanning reports as a possible XSS
sink and fails the PR on. The template is a shell script, so
select_autoescape() leaves it unescaped exactly as before, and the finding
no longer applies.

Refs #790

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-05 17:19:56 +02:00

..

agents

test(agents): take the jinja filters from the registry that ships them

2026-09-13 15:15:19 +02:00

svc-ai-litellm

fix(litellm): publish a backend only when the gateway's own flag enables it

2026-09-15 02:06:38 +02:00

svc-ai-mcp-adapter

feat(nextcloud): front the Context Agent with the MCP adapter

2026-09-03 20:55:05 +02:00

svc-bkp-container-2-local

…

svc-bkp-nfs-2-local

…

svc-bkp-remote-2-local

…

svc-bkp-volume-2-local

…

svc-db-openldap

…

svc-db-postgres

…

svc-net-firewall

fix(svc-net-tor): guard the node's resolver against everything it routes

2026-09-16 01:26:03 +02:00

svc-net-tor

fix(svc-net-tor): hand every forwarded onion port to the port probe

2026-09-22 13:41:09 +02:00

svc-net-tor-smtp

fix(stalwart): fix lint issus

2026-09-03 00:18:03 +04:00

svc-opt-keyboard-color

…

svc-opt-ssd-hdd

…

sys-ca-selfsigned

fix(swarm-stalwart): fix CI issues

2026-09-26 18:05:56 +04:00

sys-ctl-alm-email

test(mail): select autoescape for the rendered alarm script

2026-10-05 17:19:56 +02:00

sys-ctl-cln-bkps

…

sys-ctl-hlth-csp

fix(hlth-csp): let a declared status reach the vhost's onion twin

2026-09-16 23:28:02 +02:00

sys-ctl-hlth-disc-space

fix(health): exit with a status, not a failure count

2026-09-04 04:41:04 +02:00

sys-ctl-hlth-msmtp

fix(mail): retry a connection the mail server drops before its greeting

2026-10-05 11:44:58 +02:00

sys-ctl-hlth-volumes

fix(hlth-volumes): probe the NFS port the server actually serves

2026-09-04 13:43:37 +02:00

sys-ctl-hlth-webserver

fix(health): exit with a status, not a failure count

2026-09-04 04:41:04 +02:00

sys-ctl-rpr-container-hard

…

sys-ctl-rpr-container-soft

…

sys-dns-wildcards

…

sys-front-inj-all

…

sys-lock

…

sys-stk-backend

fix(bluesky): flush the compose handlers in the role that notified them

2026-09-12 09:33:48 +02:00

sys-svc-cdn

…

sys-svc-compose

fix(swarm): stop the stack deploy from waiting on a replica a run-once service never has

2026-09-03 10:51:30 +02:00

sys-svc-compose-ca

fix(swarm-stalwart): fix CI issues

2026-09-26 18:05:56 +04:00

sys-svc-container

refactor(domains): give local testing a .test domain, leave .example to docs

2026-09-02 13:10:34 +02:00

sys-svc-mail-msmtp

Merge remote-tracking branch 'upstream/main' into feature/role-stalwart-mail-swarm

2026-09-21 03:25:20 +04:00

sys-svc-proxy

fix(proxy): withdraw an ACL-gated MCP path instead of leaving it to the ACL

2026-09-08 15:29:37 +02:00

sys-svc-rdbms

fix(sys-svc-rdbms): find the persisted config when the volume names no backing store

2026-09-08 22:31:16 +02:00

sys-token-store

…

sys-util-git-pull

…

test-e2e-cli

test(mcp): fail the contract on a JSON-RPC error inside an HTTP 200

2026-09-10 12:47:15 +02:00

test-e2e-playwright

fix(swarm-stalwart): mapache once and make fixes regarding comments

2026-09-29 18:31:02 +04:00

web_app_keycloak

…

web-app-baserow

refactor(domains): give local testing a .test domain, leave .example to docs

2026-09-02 13:10:34 +02:00

web-app-bigbluebutton

refactor(domains): give local testing a .test domain, leave .example to docs

2026-09-02 13:10:34 +02:00

web-app-bookwyrm

refactor(domains): give local testing a .test domain, leave .example to docs

2026-09-02 13:10:34 +02:00

web-app-dashboard

…

web-app-decidim

…

web-app-discourse

test(update): build the addon fixture from the role-file constants

2026-09-14 17:35:49 +02:00

web-app-flowise

fix(flowise): read a refused registration as the deny list working

2026-09-02 12:12:07 +02:00

web-app-gitlab

fix(stalwart): add the fix PR into main PR

2026-09-09 00:21:58 +04:00

web-app-jellyfin

fix(tests): read the jellyfin auth script through the cache

2026-09-04 14:10:06 +02:00

web-app-keycloak

Merge remote-tracking branch 'upstream/main' into feature/role-stalwart-mail-swarm

2026-09-21 03:25:20 +04:00

web-app-littlejs

…

web-app-mailu

perf(mailu): loop over the users Mailu provisions, not the whole catalogue

2026-09-09 16:44:50 +02:00

web-app-matomo

…

web-app-matrix

test(matrix): build the vars path from the role-file constant

2026-09-12 09:55:35 +02:00

web-app-n8n

fix(n8n): serve the MCP trigger over Streamable HTTP on 1.100.1 so Open WebUI can connect

2026-09-11 12:20:46 +02:00

web-app-nextcloud

fix(nextcloud): install onlyoffice from a release that upstream published

2026-09-19 05:55:51 +02:00

web-app-openbao

style(openbao): drop the narrative exception comments

2026-09-21 00:29:15 +02:00

web-app-openwebui

test(openwebui): make the MCP client open the connection, not just record it

2026-09-01 21:58:54 +02:00

web-app-peertube

…

web-app-stalwart

style: apply make autoformat to the merged Stalwart and Tor files

2026-10-03 19:57:30 +02:00

web-app-wordpress

style: apply make autoformat to the merged Stalwart and Tor files

2026-10-03 19:57:30 +02:00

web-opt-rdr-www

…

web-svc-logout

…

__init__.py

…