fusion44 c4afca50e9 fix(system): stop leaking passwords via change-password endpoint ... The change-password endpoint accepted old_password/new_password as bare str parameters, i.e. query parameters, so the passwords ended up in access logs, proxy logs and browser history. Accept them in a ChangePasswordInput request body instead. Also mark the RaspiBlitz blitz.passwords.sh check/set invocations sensitive=True so the plaintext passwords are not written to the debug log, and guard against a missing password type (was an AttributeError -> 500). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>		2026-07-03 21:42:25 +02:00
..
models	feat: implement Ruff as a linter; fix given errors	2023-06-25 07:17:00 +02:00
routers	tests: add better integration tests	2026-02-03 11:06:06 +01:00
__init__.py	test: Add testing dependencies and first tests	2021-10-02 12:00:44 +02:00
test_app_manage_lock.py	fix(apps): don't release another task's app-manage lock	2026-07-03 20:01:54 +02:00
test_apps_uninstall_keep_data.py	fix(apps): honour keep_data on uninstall and fix install log name	2026-07-03 20:58:35 +02:00
test_change_password.py	fix(system): stop leaking passwords via change-password endpoint	2026-07-03 21:42:25 +02:00
test_cln_list_all_tx.py	fix(lightning): include payments in CLN list_all_tx	2026-07-03 20:45:21 +02:00
test_cln_shell_safety.py	fix(lightning): prevent shell injection in CLN local calls	2026-07-03 19:58:41 +02:00
test_exec_bash_timeout.py	fix(api): catch subprocess timeouts in exec_bash_command	2026-07-03 19:59:57 +02:00
test_jwt.py	fix(auth): correct JWT expiry unit and use standard exp claim	2026-07-03 20:35:34 +02:00
test_warmup_events.py	fix: send bitcoin-only warmup app status as app_state_update_message	2026-07-03 15:30:17 +02:00
utils.py	chore: format source using the pre_commit command	2022-03-20 17:20:56 +01:00