Andras Bacsai 9a2c432c79 fix(api): expose sensitive fields for privileged tokens ... Privileged API tokens can read hidden resource fields in environment and resource responses, including instance-admin team tokens with team_id 0. Configuration hashes now include hidden environment variable values so secret edits trigger restart detection.		2026-07-07 12:53:34 +02:00
..
Api	fix(api): expose sensitive fields for privileged tokens	2026-07-07 12:53:34 +02:00
Webhook	improve github webhook	2026-06-28 15:25:58 +02:00
Controller.php	fix(auth): bind magic links to their invitation	2026-06-02 12:57:30 +02:00
OauthController.php	fix: normalize oauth emails before matching users	2026-04-09 09:38:56 -06:00
UploadController.php	Merge remote-tracking branch 'origin/next' into harden-database-import-files	2026-06-29 10:35:35 +02:00