aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* lightningd: bump to v26.06.9Adam Soltys8 days1-1/+1
* email: escape support form HTML and enforce recaptcha v3 scoreAdam Soltys8 days1-37/+56
* payments: lowercase payreq before looking up our own invoicesAdam Soltys8 days2-1/+12
* invoices: a supplied account must belong to the invoice's userAdam Soltys8 days1-1/+6
* Evicted accounts can't receive or log in; limit errors say what's happeningAdam Soltys10 days3-3/+18
* v3 bridge: a migrated name's legacy receives are paid on to its v3 walletAdam Soltys10 days2-2/+147
* payments: refuse on-chain sends to blocked addresses before debitingAdam Soltys2026-09-291-0/+19
* lnurl: budget unauthenticated invoice generation per recipientAdam Soltys2026-09-291-5/+34
* logging: throttle log lines that clients can trigger at willAdam Soltys2026-09-294-11/+57
* invoices: don't let a supplied id overwrite another user's invoiceAdam Soltys2026-09-292-0/+21
* ecash: drop anonymous token storage in favour of a stateless status lookupAdam Soltys2026-09-272-7/+9
* upload: decode images in a throwaway child process and tighten input checksAdam Soltys2026-09-263-11/+127
* app: don't trust client IP headers on onion requestsAdam Soltys2026-09-251-0/+30
* safe-fetch: decode IPv6 hosts before checking for private addressesAdam Soltys2026-09-251-10/+46
* lightning: don't wedge the listener on an already-credited preimageAdam Soltys2026-09-232-2/+15
* lightningd: upgrade Core Lightning to v26.06.8Adam Soltys2026-09-221-1/+1
* parse: cache node aliases as a small map with a working timestampAdam Soltys2026-09-211-9/+13
* lightning: log quote outcomesAdam Soltys2026-09-211-0/+2
* funds: close deposits, withdrawals and authorizationsAdam Soltys2026-09-211-17/+16
* users: reserve service names on registration and renameAdam Soltys2026-09-213-4/+35
* mintdemux: melt the new half of a mixed selection instead of refusingAdam Soltys2026-09-211-7/+54
* ecash: identify our own tokens by keyset, not by the mint urlAdam Soltys2026-09-211-20/+28
* docker: build nutshell on the coinos base imageAdam Soltys2026-09-211-0/+57
* lightning: quote the routing fee up front and add a max-send quote endpointAdam Soltys2026-09-214-8/+482
* lnurl: expire payRequest callback ids after seven daysAdam Soltys2026-09-162-5/+10
* mintdemux: forward the client's rate-limit key on keyset fetchesAdam Soltys2026-09-161-4/+25
* ecash: redeem tokens by melting to the user's own invoiceAdam Soltys2026-09-167-291/+170
* printer: publish receipts at QoS 1 and clean LNURL metadata memosAdam Soltys2026-09-142-1/+19
* ecash: make claims work against the v1 keyset mintAdam Soltys2026-09-142-25/+67
* security: drop the admin endpoint surface and land pending hardeningAdam Soltys2026-09-1318-100/+280
* ln listener: skip a settlement whose account is gone before creditingAdam Soltys2026-09-051-0/+9
* credit: skip settlements for a deleted account instead of throwingAdam Soltys2026-09-051-0/+10
* flash: build each config image in its own temp dirAdam Soltys2026-09-041-6/+16
* sockets: accept read-only tokens on login, deliver payment events onlyAdam Soltys2026-09-041-1/+12
* meltguard: guard /v1/xpay and parse form-encoded melt bodiesAdam Soltys2026-09-041-8/+38
* payments: finalize settled keysends in sendKeysendAdam Soltys2026-09-041-1/+54
* flash: create printer dir and return errors instead of unhandled 500Adam Soltys2026-09-041-7/+13
* fund: authenticated recovery of a rotated fund's old linkAdam Soltys2026-08-282-5/+30
* scripts: stubborn peer-force LN payer + boltz stuck-swap recoveryAdam Soltys2026-08-272-0/+250
* health: tolerate a transient receive-listener lag, fail only if it's stuckAdam Soltys2026-08-271-4/+15
* lnurl: pin SSRF-guard fetches to the validated IP (close DNS-rebinding)Adam Soltys2026-08-271-51/+92
* harden: remove debug /echo endpoint; widen LN health probe timeoutAdam Soltys2026-08-272-6/+1
* login: fail-open recaptcha verify on infrastructure errorsAdam Soltys2026-08-251-2/+17
* take/authorize: kill-switch + validate fund-claim amountsAdam Soltys2026-08-251-4/+37
* nwc: 404 missing connections + require key rotation to revive retired onesAdam Soltys2026-08-221-2/+31
* gitignore: exclude incident-response tooling, data, and peerswap artifactsAdam Soltys2026-08-221-0/+12
* scripts: add lightning-backlog audit + kvrocks archive merge toolingAdam Soltys2026-08-223-0/+416
* deps: upgrade fastify v4 to v5 line to fix dependabot alertsAdam Soltys2026-08-223-11/+11
* log: redact secret and otpsecret from request bodiesAdam Soltys2026-08-221-1/+1
* ln: bound receive-listener wait, phase-aware watchdog, re-enable health checkAdam Soltys2026-08-223-42/+144
generated by cgit v1.2.3 (git 2.51.0) at 2026-10-15 04:48:37 +0000