aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* remove /gateway endpointAdam Soltys2026-05-172-10/+0
| | | | | | | | | Unauthenticated arbitrary db.set abuse vector. Exploited to inflate user balances and override safety controls (bitcoin:limit, limit, hardfreeze, freeze) in real time, leading to a hot-wallet drain. Route and handler both fully removed. Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>
* prevent duplicate utxo selectionAdam Soltys2026-04-261-1/+17
|
* check listpays before reversingAdam Soltys2026-04-252-5/+14
|
* remove nwc fieldAdam Soltys2026-04-011-1/+0
|
* nwc heartbeatAdam Soltys2026-03-292-14/+28
|
* lnurl proxyAdam Soltys2026-03-275-1/+146
|
* don't remove missing paymentsAdam Soltys2026-03-241-2/+1
|
* dockerfilesAdam Soltys2026-03-1911-0/+124
|
* ensure lightning payments get processedAdam Soltys2026-03-192-1/+11
|
* listener logsAdam Soltys2026-03-182-3/+2
|
* stop republishing primal eventsAdam Soltys2026-03-182-3/+14
|
* remove logsAdam Soltys2026-03-1714-50/+8
|
* catch reverse errorsAdam Soltys2026-03-173-2/+1859
|
* adjust ln minfeeregtest-dataAdam Soltys2026-03-159-26/+314
|
* pass bytes for app secretAdam Soltys2026-03-143-2/+3
|
* use bytes for nostr toolsAdam Soltys2026-03-133-4/+5
|
* fix pending payment cleanup and login password verificationAdam Soltys2026-03-062-5/+11
| | | | | | | Skip non-lightning entries in pending payments check and handle malformed password hashes gracefully during login. Co-Authored-By: Claude Opus 4.6 <[email protected]>
* fix login/reset glitchesAdam Soltys2026-03-031-7/+18
|
* handle socket errorsAdam Soltys2026-02-253-16/+334
|
* fix lnurl description_hash mismatchAdam Soltys2026-02-251-2/+6
| | | | Co-Authored-By: Claude Opus 4.6 <[email protected]>
* fix transitive dependency vulnerabilitiesAdam Soltys2026-02-242-9/+17
| | | | Co-Authored-By: Claude Opus 4.6 <[email protected]>
* fix addmanagersAdam Soltys2026-02-101-5/+4
|
* filter null managersAdam Soltys2026-02-101-2/+2
|
* check forwarded host headerAdam Soltys2026-02-061-1/+1
|
* health checkAdam Soltys2026-02-068-157/+272
|
* whitelist ua'sAdam Soltys2026-02-041-0/+11
|
* strip email from usernameAdam Soltys2026-02-021-0/+1
|
* consult archive for older paymentsAdam Soltys2026-01-305-12/+17
|
* relay reconnect logicAdam Soltys2026-01-302-31/+48
|
* purge old nwc eventsAdam Soltys2026-01-281-2/+12
|
* check usernameAdam Soltys2026-01-291-11/+1
|
* ip fallbackAdam Soltys2026-01-271-0/+5
|
* skip captcha for torAdam Soltys2026-01-271-0/+4
|
* case insensitive usernamesAdam Soltys2026-01-261-1/+4
|
* loggingAdam Soltys2026-01-261-0/+1
|
* captcha bypass whitelistAdam Soltys2026-01-261-10/+13
|
* read payments from archiveAdam Soltys2026-01-224-16/+66
|
* fix admin resetsAdam Soltys2026-01-221-7/+3
|
* api key captcha bypassAdam Soltys2026-01-221-3/+11
|
* captcha thresholdsAdam Soltys2026-01-211-11/+18
|
* require auth for accountsAdam Soltys2026-01-211-0/+5
|
* recaptcha on loginAdam Soltys2026-01-211-2/+32
|
* ignoreAdam Soltys2026-01-211-0/+2
|
* quiet nwc failuresAdam Soltys2026-01-211-8/+8
|
* loggingAdam Soltys2026-01-213-11/+11
|
* check usernameAdam Soltys2026-01-193-1/+3
|
* blacklist changeAdam Soltys2025-12-161-1/+1
|
* more robust lightning clientAdam Soltys2025-12-161-3/+85
|
* lintAdam Soltys2025-12-161-10/+10
|
* Merge pull request #82 from ericpp/catch-failed-keysendAdam Soltys2025-12-041-11/+12
|\ | | | | Catch failed keysend payments
generated by cgit v1.2.3 (git 2.51.0) at 2026-10-15 05:06:10 +0000