fb3eead982
Fix https://github.com/firefly-iii/firefly-iii/issues/12370
2026-06-30 14:42:20 +02:00
b1f32406cc
Fix https://github.com/firefly-iii/firefly-iii/issues/12335
2026-06-05 05:41:00 +02:00
fa6c123595
Fix stored XSS in ALE view by HTML-escaping piggy bank name
...
The Twig template ale.twig rendered the piggy bank name from
AuditLogEntry.after.piggy using |raw, bypassing auto-escaping.
A user-controlled name containing HTML (e.g. <img onerror=...>)
would execute as JavaScript in any browser viewing the transaction
audit log (CWE-79).
Apply |e filter to escape only the user-controlled `name` parameter
before substitution into the trans() string. The |raw filter is
preserved because the `amount` parameter legitimately contains
<span> tags for currency styling.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-20 11:07:57 -04:00
e81af7e051
Fix #12169
2026-04-22 18:34:16 +02:00
32250ddc1a
Fix https://github.com/firefly-iii/firefly-iii/issues/12169
2026-04-22 07:54:53 +02:00
7f9640087e
Fix https://github.com/firefly-iii/firefly-iii/issues/12043
2026-03-29 16:53:55 +02:00
3881cd3e39
Fix https://github.com/firefly-iii/firefly-iii/issues/12026
2026-03-24 19:20:36 +01:00
ac8dbbff6c
Remove CSS and unused files.
2026-03-14 06:25:11 +01:00
fea89c5231
Remove and replace inline styles.
2026-03-14 06:16:53 +01:00
654f2ee489
Remove inline CSS
2026-03-14 06:02:40 +01:00
a3a332643c
Replace styles with classes.
2026-03-13 20:35:39 +01:00
464a89f305
Remove lots of style attributes.
2026-03-13 20:22:50 +01:00
31d1ee11cb
Fix https://github.com/firefly-iii/firefly-iii/issues/11694
2026-02-13 08:04:39 +01:00
6d4aca54de
Fix #11246
2026-02-07 06:32:11 +01:00
fb035ba594
Fix #11660
2026-02-07 06:09:41 +01:00
88d3e01065
Add events for opening balance.
2026-02-06 18:10:41 +01:00
54f1ef0e21
Update view and audit logs for #11399
2026-01-21 06:26:48 +01:00
151be7df8a
Fix #11541
2026-01-18 06:07:50 +01:00
d9efd63fad
Add debug details.
2025-12-27 12:45:46 +01:00
4d2dd1d8f7
Fix view of running balance column
2025-12-26 20:02:09 +01:00
86f1d8a1bc
Fix ALE amount logging.
2025-12-24 07:45:03 +01:00
8e729d6bbf
Replace references to hard coded config with variables.
2025-12-20 07:00:53 +01:00
29766aa9b7
Add better running balance
2025-12-15 14:56:58 +01:00
d747ac237b
Validate title, fix running balance display
2025-12-13 06:36:20 +01:00
0b00f35101
Update packages, another fix for the same issue.
2025-12-13 06:08:58 +01:00
8f81cb8cc4
Fix #11346
2025-12-13 06:05:39 +01:00
354bbebbee
Fix #10965
2025-10-02 19:52:51 +02:00
5a1413e758
Fix #10954
2025-09-23 20:22:58 +02:00
450ac7e6ee
Fix #10813
2025-08-24 06:51:28 +02:00
4196ce31f0
Fix account thing overview.
2025-08-09 20:10:40 +02:00
55f899608d
Add multi currency to piggy overview.
2025-08-09 15:33:03 +02:00
6aab5fab05
Fix #9650
2025-08-09 06:59:55 +02:00
f76b27a73d
Fix #10565 and fix #10600
2025-08-07 19:59:02 +02:00
6278662014
Replace native with primary where possible
2025-08-01 12:31:01 +02:00
c5cbceb81a
Fix #10399
2025-06-02 05:39:43 +02:00
3344d2e5f3
Expand and pick up layout.
2025-05-30 08:11:12 +02:00
2e69e09808
Catch error
2025-05-29 19:55:13 +02:00
189a323f3c
Catch a nullpointer.
2025-05-29 13:38:40 +02:00
c074fec0a7
Import statements and update configuration.
2025-05-27 16:57:36 +02:00
bcd7db0256
Fix nullpointer in groups.twig.
2025-05-26 19:59:15 +02:00
a29904704c
Fix #10265
2025-05-11 07:01:36 +02:00
50803a2c24
Add transfer type
2025-04-26 17:29:10 +02:00
76e893f86e
Fix running balance
2025-04-26 15:24:14 +02:00
bd1232644f
Add running balance column.
2025-04-26 14:20:00 +02:00
05005eac32
Fix #10150
2025-04-20 07:56:50 +02:00
453ccd3271
Clean up overview.
2025-03-09 09:54:14 +01:00
a606315884
Fix balance display #9826
2025-02-12 11:53:51 +01:00
f42fcff04a
Fix #9783
2025-02-08 06:42:12 +01:00
8e4bdbc584
Fix https://github.com/firefly-iii/firefly-iii/issues/9720
2025-02-01 12:50:48 +01:00
705b9bf0f2
Fix https://github.com/firefly-iii/firefly-iii/issues/9719
2025-02-01 11:44:56 +01:00
James Cole
iaohkut
Sander Dorigo