Alexander Holliday
eddb9a82a8
Merge pull request #3764 from bluewave-labs/fix/increase-json-body-limit
...
fix(server): raise express.json body limit to 10mb
2026-07-10 18:23:44 -07:00
gorkem-bwl
9459edce00
scope 10mb body limit to /monitors/import/json only
...
Address review feedback: keep the global express.json() at the default
100kb and mount a route-scoped 10mb parser in front of it for
/api/v1/monitors/import/json. Express matches middleware in registration
order, so the import route uses the larger parser and every other
endpoint keeps the tight default. No change in DoS surface for normal
traffic.
2026-07-11 04:22:42 +03:00
Alexander Holliday
eaf1064413
Merge pull request #3763 from bluewave-labs/fix/status-page-custom-css-injection
...
fix(status-page): inject sanitized customCSS on the public page
2026-07-10 09:51:10 -07:00
Alexander Holliday
dae6f9a570
Merge pull request #3769 from edobusy/docs/readme-italian
...
docs(readme): add Italian translation
2026-07-10 09:20:18 -07:00
edobusy
9fa45c5871
docs(readme): add Italian translation
2026-07-10 23:46:49 +10:00
gorkem-bwl
f4177baed5
fix(server): raise express.json body limit to 10mb
...
Express defaults to a 100kb JSON body, which is too small for realistic
imports through POST /api/v1/monitors/import/json (backups with many
monitors and their config easily exceed 100kb, returning
"request entity too large").
Raise the parser cap to 10mb. That covers real-world import payloads
while keeping the DoS surface bounded — a larger, streaming file-upload
route for imports remains desirable as a follow-up.
2026-07-10 00:06:31 +03:00
gorkem-bwl
5feb666bdb
fix(status-page): inject sanitized customCSS on the public page
...
The customCSS field on status pages was persisted and validated
end-to-end but never rendered on the public page, so operator-supplied
styles had no effect.
Inject the string as a <style> tag on the public route (which the
admin preview iframe also renders), reusing the existing
cssReferencesExternalResource check so external-resource CSS
(@import, url(http…), //…) is dropped defensively on the client.
The admin preview iframe already points at the public URL, so this
one insertion covers both the live page and the in-app preview.
2026-07-09 21:55:25 +03:00
Alexander Holliday
8396f478c5
Merge pull request #3760 from bluewave-labs/fix/status-page-monitor-leak
...
node:20 => node:22
2026-07-07 10:17:31 -07:00
Alex Holliday
bbfd963deb
node:20 => node:22
2026-07-07 10:16:56 -07:00
Alexander Holliday
fc0cda3da6
Merge pull request #3758 from bluewave-labs/fix/status-page-monitor-leak
...
fix: status page monitor leak
2026-07-07 09:59:28 -07:00
Alex Holliday
861d867a17
run formatter
2026-07-07 09:55:21 -07:00
Alex Holliday
8d7c322279
bump version and deps
2026-07-07 09:54:21 -07:00
Alex Holliday
68a9bece1e
bump dependencies
2026-07-07 09:48:34 -07:00
Alex Holliday
4f82a11c66
update tests
2026-07-07 09:47:41 -07:00
Alex Holliday
cc1814f507
whitelist monitor properties instead of blacklist for status pages
2026-07-07 09:47:29 -07:00
Alex Holliday
436c11bcba
Merge branch 'develop' into fix/status-page-monitor-leak
2026-07-07 09:02:48 -07:00
Alexander Holliday
d5ec2936ad
Merge commit from fork
...
Advisory fix 1
2026-07-06 09:46:15 -07:00
Alex
937ffe4f3b
add and update tests
2026-07-06 09:39:59 -07:00
Alex
0df71d6356
use re2 for regex
2026-07-06 09:39:43 -07:00
Alex
adba25269c
tighten regex validation
2026-07-06 09:39:28 -07:00
Alex
386a384ef6
add RE2 dependency
2026-07-06 09:39:11 -07:00
Alex Holliday
8bf5db0834
remove dead code and tests
2026-07-03 11:28:00 -07:00
Alexander Holliday
817d01c857
Merge pull request #3754 from bluewave-labs/fix/worker-crash-on-mongo-error
...
fix: worker crash on mongo error
2026-07-03 10:50:59 -07:00
Alex Holliday
3f30acdbdf
add tests
2026-07-03 10:45:53 -07:00
Alex Holliday
80b604b9ff
add global unhandled exception handler
2026-07-03 10:34:02 -07:00
Alex Holliday
9356b0d482
catch on recordFailure, add defenisve cathc to run job
2026-07-03 10:33:45 -07:00
Alexander Holliday
6699a83948
Merge pull request #3753 from bluewave-labs/chore/worker-deregistration-tests
...
add additional worker tests
2026-07-03 09:48:18 -07:00
Alex Holliday
900c039672
add additional worker tests
2026-07-03 09:41:18 -07:00
Alex
a4ab7d662e
bump version fix
2026-07-02 11:05:30 -07:00
Alex
807d7e10c3
type bulk op
2026-07-02 10:55:57 -07:00
Alex
39043f3945
migration fix
2026-07-02 10:43:22 -07:00
Alex
5a72e1e123
Merge branch 'develop' of github.com:bluewave-labs/Checkmate into develop
2026-07-02 10:30:05 -07:00
Alex
959b150ebf
fix migratin
2026-07-02 10:29:15 -07:00
Alexander Holliday
552b7a037d
Merge pull request #3743 from bluewave-labs/feat/helm
...
feat: Update helm charts
2026-07-02 10:13:28 -07:00
Alex
8671685cf9
bump version
2026-07-02 10:07:42 -07:00
Alex
ff536f40a2
use version tag
2026-07-02 09:44:37 -07:00
Alex
e3d63a1cb4
bump version
2026-07-02 09:11:26 -07:00
Alexander Holliday
105d7f0580
Merge pull request #3723 from Buco7854/feat/customcss-status-page
...
Feat/customcss status page
2026-07-02 09:11:02 -07:00
Alexander Holliday
e2a1f02971
Merge pull request #3744 from Harshitbro-ctrlv/feat/status-page-minimal-theme
...
feat(status-page): add minimal theme
2026-07-02 08:59:55 -07:00
Alex
b7f548ff15
bump version
2026-07-02 08:49:36 -07:00
Harshitbro-ctrlv
29d05c1e57
feat(status-page): add minimal theme
2026-07-02 12:08:17 +05:30
Alex Holliday
0ec77a5ab1
add alias for backward compat
2026-06-30 16:58:52 -07:00
Alexander Holliday
95eb75f416
Merge pull request #3741 from sanmaxdev/fix/maintenance-window-monitor-edits
...
test: cover maintenance window monitor edits
2026-06-30 16:46:40 -07:00
Alex Holliday
8f657dcd36
fix mongo namespace
2026-06-30 10:51:21 -07:00
Alex Holliday
c0e33eb4fa
skip general rate limiter on dev mode
2026-06-30 09:08:20 -07:00
Alex Holliday
754b0af3a3
update helm charts
2026-06-30 09:08:01 -07:00
Alex Holliday
a39792cf0b
add readiness and liveness checks to API
2026-06-29 14:14:42 -07:00
Alex Holliday
35c9618d59
server->api
2026-06-29 10:15:29 -07:00
Alex Holliday
c6c41c2e3e
bare sevice
2026-06-29 10:06:34 -07:00
Alex Holliday
f58825d19f
clean up env vars
2026-06-29 10:03:48 -07:00
Alexander Holliday
gorkem-bwl
edobusy
Harshitbro-ctrlv