gitGost

Recent Commits

• livrasand(24 Oct 26)

  Enhance README markdown styling to GitHub look (#245) Updated the .readme CSS to closely match GitHub/GitLab markdown rendering. Adjusted padding, font sizes, line heights, and heading styles; refined list, table, image, and blockquote layouts; styled code blocks, inline code, and kbd elements; added GitHub‑style alert boxes with background colors; improved table borders and alternating row colors; and applied compact top/bottom margins for a cleaner appearance.

• livrasand(24 Oct 26)

  Extract anon notice, update providers, trim README (#244) Added `internal/github/notice.go` providing a shared markdown footer for anonymous contributions. Introduced `nonNilStrings` in `pr.go` to avoid sending null label slices to GitHub. Updated GitHub PR creation, Codeberg, and GitLab merge request logic to use the new `github.AnonNotice()` and the label helper. Removed the detailed Menta CAPTCHA documentation from `README.md` to streamline the README.

• livrasand(24 Oct 26)

  Add ntfy‑powered global announcement banner (#241) Implemented a new announcement system: added NTFY_ANNOUNCE_TOPIC/TOKEN env vars and docs; extended config loading; started an ntfy subscriber in main.go; created internal/announcement package with payload processing, in‑memory store, HTTP API with rate limiting, and a streaming subscriber; served announcement.js and the API route (including during maintenance); injected the script into all UI pages. This enables private ntfy/UnifiedPush banners across the site.

• livrasand(23 Oct 26)

  Update README.md (#240)

• livrasand(23 Oct 26)

  Delete fly.qa.toml (#239)

• livrasand(21 Oct 26)

  Add sponsor banner & fix CAPTCHA gate edge cases (#236) Introduces a toggleable donation banner (SPONSOR_BANNER env var, admin /sponsor endpoint, UI components, localStorage dismissal) and integrates its state into status responses. Adds persistent CAPTCHA gate signing key generation, clears stale gate cookies, and provides a new /api/captcha-gate/status endpoint with rate limiting. Updates README, config, handlers, router, and frontend assets to use the same‑origin proxy for Menta CAPTCHA, removes unnecessary widget instances, improves PoW solving, and adds related rate‑limiters.

• livrasand(21 Oct 26)

  Switch session cookie to g2 and improve CAPTCHA handling (#235) Update the CAPTCHA gate to use the new "g2" cookie format and add a configurable session key (GITGOST_GATE_KEY). Refactor frontend flow: guard against empty endpoint values, detect widget direct/API endpoints, lazily create the <menta-widget> only when needed, and improve error handling and user messages (English UI). README and HTML files are updated to reflect the new cookie version and English text. The loader script is now explicitly included where required.

• livrasand(21 Oct 26)

  Make CSP Menta origin configurable via MENTA_API_ENDPOINT (#234) Added logic to derive the Menta captcha origin from the `MENTA_API_ENDPOINT` configuration, parsing the URL to build the scheme and host. Provided a fallback to the default Menta URL when the endpoint is unset or invalid. Updated the Content‑Security‑Policy header to use the computed `mentaOrigin` in both `script-src` and `connect-src` directives, ensuring CSP adapts to custom deployments.

• livrasand(21 Oct 26)

  Add Menta CAPTCHA integration and gate protection (#233) Introduces Menta CAPTCHA support with new environment variables (MENTA_API_ENDPOINT, MENTA_API_KEY, MENTA_CAPTCHA_ENFORCE) and loads them in the configuration. Initializes CAPTCHA handling in `main.go`. Adds a full CAPTCHA gate implementation (`mentagate.go`) including token verification, shielding, cookie management, and proxy endpoint. Extends the HTTP config handler to expose CAPTCHA status and endpoint. Updates router to enforce CAPTCHA for repo, profile, and index pages and adds POST `/captcha-gate` and proxy `/captcha/*` routes. Includes frontend loader (`captcha-loader.js`), updates the challenge page to use the new cookie version and widget, and injects the loader script into the main UI.

• livrasand(21 Oct 26)

  Add Menta captcha integration and remove issue UI (#231) Integrated Menta captcha across the web UI: added the captcha script to repo.html, inserted <menta-widget> elements in reply forms and issue creation dialogs, and sent the generated captcha token with API payloads. Updated the Content‑Security‑Policy to allow the new captcha domain and its resources. Removed the issue/comment/pr‑comment entries from the navigation and status bar menus. Added a global helper `window.gitgostCaptchaToken` for retrieving the token from widgets.

• livrasand(21 Oct 26)

  Remove Menta CAPTCHA integration and gate (#230) Deleted all Menta CAPTCHA code, config fields, and gate middleware. Updated handlers to stop verifying CAPTCHA tokens, removed captchagate files and related tests, simplified CSP by dropping dynamic Menta origins, and stripped UI components and scripts that loaded the CAPTCHA widget. Routes now serve HTML directly without gate checks.

• livrasand(21 Oct 26)

  Improve CSP and harden gate cookie validation (#229) Added Cloudflare Insights domains to the Content‑Security‑Policy script-src and connect-src directives. Updated the `gateCookiePresent` function across all HTML pages to thoroughly validate the `gost_gate` cookie format, ensure it has three parts with a proper version marker, and reject expired or malformed values.

• livrasand(21 Oct 26)

  Reduce maintenance page poll frequency to hourly (#228) Adjusted README and maintenance.html to change the maintenance status polling interval from every 5 seconds to once per hour. Updated meta refresh, UI text, and JavaScript interval (now 3600 s / 3,600,000 ms) accordingly.

• livrasand(20 Oct 26)

  Update README.md (#227)

• livrasand(20 Oct 26)

  Add CAPTCHA gate and rate limits (#226) Introduced a privacy‑first anti‑scraping CAPTCHA gate with signed cookie (gost_gate), new challenge page, captcha loader, and server‑side verification endpoints. Added per‑IP rate limiting for git fetch (60/min) and anonymous write actions (10/min). Updated config sanitization to drop placeholder values from .env.example and token pool placeholders. Refactored auth middleware, node API, and pairing logic to rely solely on ZKP identity. Updated documentation, README, and .env.example to remove API key references. Added robots.txt/robots.json blocking all bots. Adjusted tests, e2e, and routers to accommodate new auth flow and rate limits. Implemented CSP adjustments, service worker fetch logic, and UI changes across HTML pages to handle the new gate.

• livrasand(20 Oct 26)

  Add maintenance mode and redesign UI with zen theme (#225) Implemented a new MAINTENANCE_MODE environment variable and Config field, initializing maintenance mode at startup and toggling it via the panic endpoint. Added maintenance middleware and a full 503 maintenance page with auto‑refresh and client‑side status polling. Updated README with documentation on the feature and usage examples. Redesigned the UI across the application: switched to a zen color palette, removed most border radii and box‑shadows, updated scrollbars, icons, and various component styles to use the new palette and a flatter aesthetic.

• livrasand(20 Oct 26)

  Update README.md (#224)

• dependabot[bot](14 Oct 26)

  chore(deps-dev): bump brace-expansion from 5.0.9 to 5.0.12 in the npm_and_yarn group across 1 directory (#222) Bumps the npm_and_yarn group with 1 update in the / directory: [brace-expansion](https://github.com/juliangruber/brace-expansion). Updates `brace-expansion` from 5.0.9 to 5.0.12 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/juliangruber/brace-expansion/commit/f3410159d768f56c9d9f4511d3e1b46425fc1099"><code>f341015</code></a> 5.0.12</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/33a5ef17b8d800bbfa8c52b14c39043b6aac1a96"><code>33a5ef1</code></a> Merge commit from fork</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/82479277b90f2f86263e946f9ff89689b3734568"><code>8247927</code></a> 5.0.11</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c"><code>935d78f</code></a> Merge commit from fork</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/df7682f386cdf2d7fef6067bc78ed70d824e1f3f"><code>df7682f</code></a> 5.0.10</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/1ade9de71f3a8719c82c61a7977121067bb55b02"><code>1ade9de</code></a> npm run format</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3"><code>6735c94</code></a> Merge commit from fork</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/4e7046543469d31e2b324b1bf14d8606d74f7f18"><code>4e70465</code></a> chore: ensure prettier formatting (<a href="https://redirect.github.com/juliangruber/brace-expansion/issues/154">#154</a>)</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/fd7a5e34cfcd9a9df6e0ee17817807104392ecff"><code>fd7a5e3</code></a> Bump ip-address from 10.2.0 to 10.4.0 (<a href="https://redirect.github.com/juliangruber/brace-expansion/issues/152">#152</a>)</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/1790143e9aa05279b087b94104c03d3cb775e2e4"><code>1790143</code></a> Bump uuid and <code>@​tapjs/processinfo</code> (<a href="https://redirect.github.com/juliangruber/brace-expansion/issues/120">#120</a>)</li> <li>See full diff in <a href="https://github.com/juliangruber/brace-expansion/compare/v5.0.9...v5.0.12">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/livrasand/gitGost/network/alerts). </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

• dependabot[bot](14 Oct 26)

  chore(deps): bump @capacitor/android from 8.5.0 to 8.5.1 in the npm_and_yarn group across 1 directory (#221) Bumps the npm_and_yarn group with 1 update in the / directory: [@capacitor/android](https://github.com/ionic-team/capacitor). Updates `@capacitor/android` from 8.5.0 to 8.5.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/ionic-team/capacitor/releases">@​capacitor/android's releases</a>.</em></p> <blockquote> <h2>8.5.1</h2> <h2><a href="https://github.com/ionic-team/capacitor/compare/8.5.0...8.5.1">8.5.1</a> (2026-08-31)</h2> <h3>Bug Fixes</h3> <ul> <li>block navigation to the internal HTTP proxy path (<a href="https://github.com/ionic-team/capacitor/commit/ee586ae680887ba99d066616f976db149542d922">ee586ae</a>)</li> <li><strong>cli:</strong> use POSIX paths in CapApp-SPM Package.swift (<a href="https://redirect.github.com/ionic-team/capacitor/issues/8549">#8549</a>) (<a href="https://github.com/ionic-team/capacitor/commit/5e5bb3befc312477900252ab07e23b596f8cb0d1">5e5bb3b</a>)</li> <li><strong>core:</strong> prevent removeListener from removing wrong listener (<a href="https://redirect.github.com/ionic-team/capacitor/issues/8271">#8271</a>) (<a href="https://github.com/ionic-team/capacitor/commit/5ac4dd613ae989d8dc8738ea25b77efbd4fa21fe">5ac4dd6</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/ionic-team/capacitor/blob/main/CHANGELOG.md">@​capacitor/android's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/ionic-team/capacitor/compare/8.5.0...8.5.1">8.5.1</a> (2026-08-31)</h2> <h3>Bug Fixes</h3> <ul> <li>block navigation to the internal HTTP proxy path (<a href="https://github.com/ionic-team/capacitor/commit/ee586ae680887ba99d066616f976db149542d922">ee586ae</a>)</li> <li><strong>cli:</strong> use POSIX paths in CapApp-SPM Package.swift (<a href="https://redirect.github.com/ionic-team/capacitor/issues/8549">#8549</a>) (<a href="https://github.com/ionic-team/capacitor/commit/5e5bb3befc312477900252ab07e23b596f8cb0d1">5e5bb3b</a>)</li> <li><strong>core:</strong> prevent removeListener from removing wrong listener (<a href="https://redirect.github.com/ionic-team/capacitor/issues/8271">#8271</a>) (<a href="https://github.com/ionic-team/capacitor/commit/5ac4dd613ae989d8dc8738ea25b77efbd4fa21fe">5ac4dd6</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ionic-team/capacitor/commit/0c9e35dec13a99ec4a582a2edc536cbec96bf27d"><code>0c9e35d</code></a> Release 8.5.1</li> <li><a href="https://github.com/ionic-team/capacitor/commit/ee586ae680887ba99d066616f976db149542d922"><code>ee586ae</code></a> fix: block navigation to the internal HTTP proxy path</li> <li><a href="https://github.com/ionic-team/capacitor/commit/5ac4dd613ae989d8dc8738ea25b77efbd4fa21fe"><code>5ac4dd6</code></a> fix(core): prevent removeListener from removing wrong listener (<a href="https://redirect.github.com/ionic-team/capacitor/issues/8271">#8271</a>)</li> <li><a href="https://github.com/ionic-team/capacitor/commit/5e5bb3befc312477900252ab07e23b596f8cb0d1"><code>5e5bb3b</code></a> fix(cli): use POSIX paths in CapApp-SPM Package.swift (<a href="https://redirect.github.com/ionic-team/capacitor/issues/8549">#8549</a>)</li> <li>See full diff in <a href="https://github.com/ionic-team/capacitor/compare/8.5.0...8.5.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/livrasand/gitGost/network/alerts). </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

• livrasand(17 Sept 26)

  Harden SSRF checks for proxied upstreams (#220) This change hardens outbound proxying against SSRF by building Menta targets from a fixed server endpoint and trimming client-controlled path input instead of using raw URLs. It also adds centralized validation for release asset upstream URLs, enforcing HTTPS-only parsing, rejecting userinfo/scheme abuse, checking provider allowlists, and reconstructing the final request URL from validated components before making the outgoing request. This prevents open-proxy and host manipulation while keeping provider-specific asset access restricted to approved hosts.

• livrasand(17 Sept 26)

  Restrict preview deploy permissions (#218) The preview deployment workflow was missing explicit permissions, which could grant broader access than needed. This change adds a read-only `contents` permission to follow the principle of least privilege.

• livrasand(17 Sept 26)

  Escape repo tree error messages (#217) The repo tree error handler was inserting exception text into innerHTML without escaping it. This could allow HTML/script injection from runtime errors. The fix sanitizes the message before rendering it so failed loads are displayed safely.

• livrasand(17 Sept 26)

  Safer DOM links and same-origin navigation (#216) Replace string-built HTML with DOM element creation for the status bar path and latest-release preview to avoid injection and improve event handling. Add sameOriginHref(href) helper and use it before assigning window.location.href so only same-origin http(s) links are navigated via location (preserving Ctrl/Cmd new-tab behavior). Introduce renderLatestRelease and makePathLink helpers and refactor branch display to use replaceChildren and DOM nodes. --------- Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

• livrasand(17 Sept 26)

  Fix SSRF in Menta captcha proxy (#215) Restrict Menta proxy requests to the configured host and scheme, reject unsafe paths and methods, and add focused SSRF regression tests covering same-host allowlisting and cross-host/path traversal rejection.

• livrasand(17 Sept 26)

  Add BIP39 recovery, UI tweaks & host rename (#213) Rename default host from gitgost.fly.dev → gitgost.livrasand.com across code, docs and tests. Add client-side BIP39 wordlist and recovery (generate/validate mnemonic, PBKDF2 seed -> key), restore/recover UI, copy/download helpers and captcha integration for registration. Implement ZKP registration sweeper (7d grace) to purge stale identities and StartZKPRegistrationSweeper background task. Improve Menta captcha proxy (headers, IP, API key), many responsive UI/CSS/JS enhancements, new logos/assets and service worker cache bump. Add CONTRIBUTING PR policy and update release workflow curl URL and security.txt canonical.

• livrasand(17 Sept 26)

  Switch default server; add ZKP sweeper, captcha, UI (#214) Change default service URL from gitgost.fly.dev to gitgost.livrasand.com across configs, docs and web assets. Enable Menta captcha by default (fly.toml) and improve Menta proxy headers. Add ZKP registration improvements: captcha + honeypot, CreatedAt timestamp, 7-day grace period and a background sweeper to purge stale registrations. Enhance zkp-client with BIP39 recovery phrase, PBKDF2 seed derivation, registration/recovery UI and captcha flow. Multiple web UI/mobile CSS/JS tweaks, add bip39-words, bump service-worker cache, and small http/ntfy robustness fixes.

• dependabot[bot](09 Sept 26)

  chore(deps-dev): bump @xmldom/xmldom from 0.9.10 to 0.9.12 in the npm_and_yarn group across 1 directory (#210) Bumps the npm_and_yarn group with 1 update in the / directory: [@xmldom/xmldom](https://github.com/xmldom/xmldom). Updates `@xmldom/xmldom` from 0.9.10 to 0.9.12 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/xmldom/xmldom/releases">@​xmldom/xmldom's releases</a>.</em></p> <blockquote> <h2>0.9.12</h2> <p><a href="https://github.com/xmldom/xmldom/compare/0.9.11...0.9.12">Commits</a></p> <h3>Fixed</h3> <ul> <li>Security: parsing a deeply or repeatedly namespaced document no longer consumes quadratic memory; the in-scope namespace map is inherited through the prototype chain instead of being copied for every prefix-declaring element (O(N) instead of O(N²)), preventing a denial-of-service reachable from <code>DOMParser.parseFromString</code> with default options. Serialized output is byte-identical. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-965w-775f-mr7g"><code>GHSA-965w-775f-mr7g</code></a></li> <li>Security: attribute de-duplication during parsing is now O(M) instead of O(M²); the <code>NamedNodeMap</code> parse-time dedup path uses a null-prototype membership index, so a well-formed document with a hostile number of duplicate attributes can no longer wedge the parse. Attribute order and duplicate resolution (last value wins, first position kept) are byte-identical, preserving the XML <a href="https://www.w3.org/TR/xml/#uniqattspec">no-duplicate-attributes well-formedness constraint</a>. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-8344-3jmq-59r6"><code>GHSA-8344-3jmq-59r6</code></a></li> <li>Security: HTML raw-text parsing no longer amplifies output on a missing or case-mismatched closing tag; the closing tag is matched case-insensitively per the WHATWG HTML <a href="https://html.spec.whatwg.org/multipage/parsing.html#rawtext-end-tag-name-state">RAWTEXT end-tag rule</a> and a missing closing tag is handled explicitly, preventing a denial-of-service. Output for well-formed input is unchanged. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-6mj3-qw4j-hgrw"><code>GHSA-6mj3-qw4j-hgrw</code></a></li> <li>Security: malformed-input recovery is now linear instead of quadratic — the malformed tag-name scan terminates at an embedded <code>&lt;</code>, and <code>Node.prototype.normalize()</code> merges adjacent text nodes in O(K) instead of O(K²) (also reachable programmatically), per <a href="https://dom.spec.whatwg.org/#dom-node-normalize"><code>normalize()</code></a> in the WHATWG DOM spec. DOM output is unchanged; only the reported error text differs. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-93r5-fhx6-vmg9"><code>GHSA-93r5-fhx6-vmg9</code></a></li> <li>Security: <code>XMLSerializer.serializeToString()</code> under <code>{ requireWellFormed: true }</code> now rejects a DocType <code>name</code> that is not a valid XML <a href="https://www.w3.org/TR/xml/#NT-Name"><code>Name</code></a>, throwing <code>InvalidStateError</code> — matching the sibling <code>publicId</code>/<code>systemId</code>/<code>internalSubset</code> checks and preventing XML injection via <code>DocumentType.name</code>. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-27p8-2357-5qqv"><code>GHSA-27p8-2357-5qqv</code></a></li> <li>Security: <code>XMLSerializer.serializeToString()</code> under <code>{ requireWellFormed: true }</code> now validates a processing-instruction target as an XML <a href="https://www.w3.org/TR/xml-names/#NT-NCName"><code>NCName</code></a> and rejects a case-insensitive <code>xml</code>, throwing <code>InvalidStateError</code> — preventing PI-target injection via <code>&gt;</code>, <code>?</code>, or whitespace. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-c7q8-3ch8-vqpv"><code>GHSA-c7q8-3ch8-vqpv</code></a></li> <li>Security: <code>Document.createEntityReference()</code> now rejects an invalid XML <a href="https://www.w3.org/TR/xml/#NT-Name"><code>Name</code></a> at creation, and <code>XMLSerializer.serializeToString()</code> under <code>{ requireWellFormed: true }</code> validates an <code>EntityReference</code> <code>nodeName</code> as an XML <code>Name</code>, throwing <code>InvalidStateError</code> — preventing XML injection via an entity-reference name. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-6gmq-8vp8-gcm6"><code>GHSA-6gmq-8vp8-gcm6</code></a></li> <li>Security: the <code>requireWellFormed</code> serializer's element- and attribute-name validators no longer treat an interior line terminator as satisfying the name anchors, so a name containing a line terminator is rejected with <code>InvalidStateError</code> — closing a bypass of the XML <a href="https://www.w3.org/TR/xml-names/#NT-QName"><code>QName</code></a> check. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-jxjr-3g7g-3944"><code>GHSA-jxjr-3g7g-3944</code></a></li> <li>Security: the <code>requireWellFormed</code> serializer's DocType <code>publicId</code>/<code>systemId</code> validators no longer treat an interior line terminator as satisfying the anchor, so an identifier containing an ECMAScript line terminator is rejected with <code>InvalidStateError</code> — closing a bypass of the XML <a href="https://www.w3.org/TR/xml/#NT-PubidLiteral"><code>PubidLiteral</code></a>/<code>SystemLiteral</code> check. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-vr34-hp96-76pp"><code>GHSA-vr34-hp96-76pp</code></a></li> <li>Security: <code>createElementNS()</code>, <code>createAttributeNS()</code>, <code>createDocumentType()</code>, and <code>createAttribute()</code> now reject a name containing a line terminator with <code>InvalidCharacterError</code>, because name validation applies to the whole string — closing a creation-time bypass of the XML <a href="https://www.w3.org/TR/xml-names/#NT-QName"><code>Name</code>/<code>QName</code></a> production on the default serialization path. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-3px3-54cx-rmw9"><code>GHSA-3px3-54cx-rmw9</code></a></li> <li>Security: the parser now reports a not-well-formed end tag whose valid name is followed by trailing content (a recoverable <code>error</code> in XML, a <code>warning</code> in HTML) instead of accepting it silently, per the XML <a href="https://www.w3.org/TR/xml/#NT-ETag"><code>ETag</code></a> production; parsing recovers to the byte-identical DOM. Consumers that want strict rejection can escalate the reported <code>error</code> to fatal via the parser's <code>onError</code> handler. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-6h8r-xr42-gp59"><code>GHSA-6h8r-xr42-gp59</code></a></li> <li><code>DOMException</code>s raised during parsing are now reported as a <code>fatalError</code>, and the originating error is preserved as the <code>cause</code> on the resulting <code>ParseError</code>.</li> </ul> <h3>Chore</h3> <ul> <li>updated dependencies</li> </ul> <p>Thank you, <a href="https://github.com/ericchiang"><code>@​ericchiang</code></a>, <a href="https://github.com/KarimTantawey"><code>@​KarimTantawey</code></a>, <a href="https://github.com/bhaswanthc"><code>@​bhaswanthc</code></a>, <a href="https://github.com/arpitjain099"><code>@​arpitjain099</code></a>, <a href="https://github.com/Paranoidgrinch"><code>@​Paranoidgrinch</code></a>, for your contributions</p> <h2>0.9.11</h2> <p><a href="https://github.com/xmldom/xmldom/compare/0.9.10...0.9.11">Commits</a></p> <h3>Fixed</h3> <ul> <li>Security: <code>XMLSerializer.serializeToString()</code> now also rejects invalid element and attribute names when <code>{ requireWellFormed: true }</code> is passed, throwing <code>InvalidStateError</code> for a name that is not a valid XML <a href="https://www.w3.org/TR/xml-names/#NT-QName"><code>QName</code></a> (this covers the namespace prefix, which surfaces in the element qualified name or in a synthesized <code>xmlns:</code> declaration). This prevents XML injection via <code>createElement()</code> / <code>setAttribute()</code>, extending the existing <code>requireWellFormed</code> checks to the serialized name set. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-w2rr-34g9-rvrj"><code>GHSA-w2rr-34g9-rvrj</code></a> <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-4w3w-2rp5-g8jm"><code>GHSA-4w3w-2rp5-g8jm</code></a></li> <li>Security: the processing-instruction grammar regex no longer backtracks quadratically on an unterminated processing instruction (<code>&lt;?…</code> with no closing <code>?&gt;</code>), preventing a denial-of-service (ReDoS) reachable from <code>DOMParser.parseFromString</code> with default options. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-g53g-w8rj-fmg7"><code>GHSA-g53g-w8rj-fmg7</code></a></li> <li><code>CharacterData</code> <code>nodeValue</code> and <code>data</code> are now kept in sync <a href="https://redirect.github.com/xmldom/xmldom/pull/990"><code>[#990](https://github.com/xmldom/xmldom/issues/990)</code></a></li> </ul> <h3>Chore</h3> <ul> <li>updated dependencies</li> </ul> <p>Thank you, <a href="https://github.com/bhaswanthc"><code>@​bhaswanthc</code></a>, <a href="https://github.com/jmestwa-coder"><code>@​jmestwa-coder</code></a>, <a href="https://github.com/stevenobiajulu"><code>@​stevenobiajulu</code></a>, for your contributions</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/xmldom/xmldom/blob/master/CHANGELOG.md">@​xmldom/xmldom's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/xmldom/xmldom/compare/0.9.11...0.9.12">0.9.12</a></h2> <h3>Fixed</h3> <ul> <li>Security: parsing a deeply or repeatedly namespaced document no longer consumes quadratic memory; the in-scope namespace map is inherited through the prototype chain instead of being copied for every prefix-declaring element (O(N) instead of O(N²)), preventing a denial-of-service reachable from <code>DOMParser.parseFromString</code> with default options. Serialized output is byte-identical. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-965w-775f-mr7g"><code>GHSA-965w-775f-mr7g</code></a></li> <li>Security: attribute de-duplication during parsing is now O(M) instead of O(M²); the <code>NamedNodeMap</code> parse-time dedup path uses a null-prototype membership index, so a well-formed document with a hostile number of duplicate attributes can no longer wedge the parse. Attribute order and duplicate resolution (last value wins, first position kept) are byte-identical, preserving the XML <a href="https://www.w3.org/TR/xml/#uniqattspec">no-duplicate-attributes well-formedness constraint</a>. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-8344-3jmq-59r6"><code>GHSA-8344-3jmq-59r6</code></a></li> <li>Security: HTML raw-text parsing no longer amplifies output on a missing or case-mismatched closing tag; the closing tag is matched case-insensitively per the WHATWG HTML <a href="https://html.spec.whatwg.org/multipage/parsing.html#rawtext-end-tag-name-state">RAWTEXT end-tag rule</a> and a missing closing tag is handled explicitly, preventing a denial-of-service. Output for well-formed input is unchanged. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-6mj3-qw4j-hgrw"><code>GHSA-6mj3-qw4j-hgrw</code></a></li> <li>Security: malformed-input recovery is now linear instead of quadratic — the malformed tag-name scan terminates at an embedded <code>&lt;</code>, and <code>Node.prototype.normalize()</code> merges adjacent text nodes in O(K) instead of O(K²) (also reachable programmatically), per <a href="https://dom.spec.whatwg.org/#dom-node-normalize"><code>normalize()</code></a> in the WHATWG DOM spec. DOM output is unchanged; only the reported error text differs. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-93r5-fhx6-vmg9"><code>GHSA-93r5-fhx6-vmg9</code></a></li> <li>Security: <code>XMLSerializer.serializeToString()</code> under <code>{ requireWellFormed: true }</code> now rejects a DocType <code>name</code> that is not a valid XML <a href="https://www.w3.org/TR/xml/#NT-Name"><code>Name</code></a>, throwing <code>InvalidStateError</code> — matching the sibling <code>publicId</code>/<code>systemId</code>/<code>internalSubset</code> checks and preventing XML injection via <code>DocumentType.name</code>. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-27p8-2357-5qqv"><code>GHSA-27p8-2357-5qqv</code></a></li> <li>Security: <code>XMLSerializer.serializeToString()</code> under <code>{ requireWellFormed: true }</code> now validates a processing-instruction target as an XML <a href="https://www.w3.org/TR/xml-names/#NT-NCName"><code>NCName</code></a> and rejects a case-insensitive <code>xml</code>, throwing <code>InvalidStateError</code> — preventing PI-target injection via <code>&gt;</code>, <code>?</code>, or whitespace. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-c7q8-3ch8-vqpv"><code>GHSA-c7q8-3ch8-vqpv</code></a></li> <li>Security: <code>Document.createEntityReference()</code> now rejects an invalid XML <a href="https://www.w3.org/TR/xml/#NT-Name"><code>Name</code></a> at creation, and <code>XMLSerializer.serializeToString()</code> under <code>{ requireWellFormed: true }</code> validates an <code>EntityReference</code> <code>nodeName</code> as an XML <code>Name</code>, throwing <code>InvalidStateError</code> — preventing XML injection via an entity-reference name. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-6gmq-8vp8-gcm6"><code>GHSA-6gmq-8vp8-gcm6</code></a></li> <li>Security: the <code>requireWellFormed</code> serializer's element- and attribute-name validators no longer treat an interior line terminator as satisfying the name anchors, so a name containing a line terminator is rejected with <code>InvalidStateError</code> — closing a bypass of the XML <a href="https://www.w3.org/TR/xml-names/#NT-QName"><code>QName</code></a> check. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-jxjr-3g7g-3944"><code>GHSA-jxjr-3g7g-3944</code></a></li> <li>Security: the <code>requireWellFormed</code> serializer's DocType <code>publicId</code>/<code>systemId</code> validators no longer treat an interior line terminator as satisfying the anchor, so an identifier containing an ECMAScript line terminator is rejected with <code>InvalidStateError</code> — closing a bypass of the XML <a href="https://www.w3.org/TR/xml/#NT-PubidLiteral"><code>PubidLiteral</code></a>/<code>SystemLiteral</code> check. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-vr34-hp96-76pp"><code>GHSA-vr34-hp96-76pp</code></a></li> <li>Security: <code>createElementNS()</code>, <code>createAttributeNS()</code>, <code>createDocumentType()</code>, and <code>createAttribute()</code> now reject a name containing a line terminator with <code>InvalidCharacterError</code>, because name validation applies to the whole string — closing a creation-time bypass of the XML <a href="https://www.w3.org/TR/xml-names/#NT-QName"><code>Name</code>/<code>QName</code></a> production on the default serialization path. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-3px3-54cx-rmw9"><code>GHSA-3px3-54cx-rmw9</code></a></li> <li>Security: the parser now reports a not-well-formed end tag whose valid name is followed by trailing content (a recoverable <code>error</code> in XML, a <code>warning</code> in HTML) instead of accepting it silently, per the XML <a href="https://www.w3.org/TR/xml/#NT-ETag"><code>ETag</code></a> production; parsing recovers to the byte-identical DOM. Consumers that want strict rejection can escalate the reported <code>error</code> to fatal via the parser's <code>onError</code> handler. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-6h8r-xr42-gp59"><code>GHSA-6h8r-xr42-gp59</code></a></li> <li><code>DOMException</code>s raised during parsing are now reported as a <code>fatalError</code>, and the originating error is preserved as the <code>cause</code> on the resulting <code>ParseError</code>.</li> </ul> <h3>Chore</h3> <ul> <li>updated dependencies</li> </ul> <p>Thank you, <a href="https://github.com/ericchiang"><code>@​ericchiang</code></a>, <a href="https://github.com/KarimTantawey"><code>@​KarimTantawey</code></a>, <a href="https://github.com/bhaswanthc"><code>@​bhaswanthc</code></a>, <a href="https://github.com/arpitjain099"><code>@​arpitjain099</code></a>, <a href="https://github.com/Paranoidgrinch"><code>@​Paranoidgrinch</code></a>, for your contributions</p> <h2><a href="https://github.com/xmldom/xmldom/compare/0.8.14...0.8.15">0.8.15</a></h2> <h3>Fixed</h3> <ul> <li>Security: parsing a deeply or repeatedly namespaced document no longer consumes quadratic memory; the in-scope namespace map is inherited through the prototype chain instead of being copied for every prefix-declaring element (O(N) instead of O(N²)), preventing a denial-of-service reachable from <code>DOMParser.parseFromString</code> with default options. Serialized output is byte-identical. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-965w-775f-mr7g"><code>GHSA-965w-775f-mr7g</code></a></li> <li>Security: attribute de-duplication during parsing is now O(M) instead of O(M²); the <code>NamedNodeMap</code> parse-time dedup path uses a null-prototype membership index, so a well-formed document with a hostile number of duplicate attributes can no longer wedge the parse. Attribute order and duplicate resolution (last value wins, first position kept) are byte-identical, preserving the XML <a href="https://www.w3.org/TR/xml/#uniqattspec">no-duplicate-attributes well-formedness constraint</a>. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-8344-3jmq-59r6"><code>GHSA-8344-3jmq-59r6</code></a></li> <li>Security: trimming trailing whitespace from an XML end tag (<a href="https://www.w3.org/TR/xml/#NT-ETag"><code>ETag</code></a>) is now anchored so it runs in linear time instead of backtracking quadratically on a long whitespace run, preventing a ReDoS reachable from <code>DOMParser.parseFromString</code>. Trimmed output is byte-identical. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-x4fp-j954-r2f4"><code>GHSA-x4fp-j954-r2f4</code></a></li> <li>Security: malformed-input recovery is now linear instead of quadratic — the malformed tag-name scan terminates at an embedded <code>&lt;</code>, and <code>Node.prototype.normalize()</code> merges adjacent text nodes in O(K) instead of O(K²) (also reachable programmatically), per <a href="https://dom.spec.whatwg.org/#dom-node-normalize"><code>normalize()</code></a> in the WHATWG DOM spec. DOM output is unchanged; only the reported error text differs. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-93r5-fhx6-vmg9"><code>GHSA-93r5-fhx6-vmg9</code></a></li> <li>Security: <code>XMLSerializer.serializeToString()</code> under <code>{ requireWellFormed: true }</code> now rejects a DocType <code>name</code> that is not a valid XML <a href="https://www.w3.org/TR/xml/#NT-Name"><code>Name</code></a>, throwing <code>InvalidStateError</code> — matching the sibling <code>publicId</code>/<code>systemId</code>/<code>internalSubset</code> checks and preventing XML injection via <code>DocumentType.name</code>. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-27p8-2357-5qqv"><code>GHSA-27p8-2357-5qqv</code></a></li> <li>Security: <code>XMLSerializer.serializeToString()</code> under <code>{ requireWellFormed: true }</code> now validates a processing-instruction target as an XML <a href="https://www.w3.org/TR/xml-names/#NT-NCName"><code>NCName</code></a> and rejects a case-insensitive <code>xml</code>, throwing <code>InvalidStateError</code> — a check <code>0.8.x</code> did not previously perform, preventing PI-target injection via <code>&gt;</code>, <code>?</code>, or whitespace. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-c7q8-3ch8-vqpv"><code>GHSA-c7q8-3ch8-vqpv</code></a></li> <li>Security: <code>Document.createEntityReference()</code> now rejects an invalid XML <a href="https://www.w3.org/TR/xml/#NT-Name"><code>Name</code></a> at creation, and <code>XMLSerializer.serializeToString()</code> under <code>{ requireWellFormed: true }</code> validates an <code>EntityReference</code> <code>nodeName</code> as an XML <code>Name</code>, throwing <code>InvalidStateError</code> — preventing XML injection via an entity-reference name. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-6gmq-8vp8-gcm6"><code>GHSA-6gmq-8vp8-gcm6</code></a></li> <li>Security: the parser now reports a not-well-formed end tag whose valid name is followed by trailing content as a recoverable <code>error</code> instead of accepting it silently, per the XML <a href="https://www.w3.org/TR/xml/#NT-ETag"><code>ETag</code></a> production; parsing recovers to the byte-identical DOM. Consumers that want strict rejection can escalate the reported <code>error</code> to fatal via the parser's <code>errorHandler</code>. <a href="https://github.com/xmldom/xmldom/security/advisories/GHSA-6h8r-xr42-gp59"><code>GHSA-6h8r-xr42-gp59</code></a></li> </ul> <p>Thank you, <a href="https://github.com/ericchiang"><code>@​ericchiang</code></a>, <a href="https://github.com/bhaswanthc"><code>@​bhaswanthc</code></a>, <a href="https://github.com/arpitjain099"><code>@​arpitjain099</code></a>, <a href="https://github.com/Paranoidgrinch"><code>@​Paranoidgrinch</code></a>, for your contributions</p> <h2><a href="https://github.com/xmldom/xmldom/compare/0.9.10...0.9.11">0.9.11</a></h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/xmldom/xmldom/commit/0af8cf829d8a92bbac612903422c6947f5458f06"><code>0af8cf8</code></a> 0.9.12</li> <li><a href="https://github.com/xmldom/xmldom/commit/69d257bd677aed2dde833a6dd67ddf244c370e41"><code>69d257b</code></a> docs: add 0.9.12 CHANGELOG entry</li> <li><a href="https://github.com/xmldom/xmldom/commit/e53e9b125de830559747b09d9f152c255600ddb9"><code>e53e9b1</code></a> docs: add 0.8.15 CHANGELOG entry</li> <li><a href="https://github.com/xmldom/xmldom/commit/0748720b620555f8c222782dcab575cf0cf403b4"><code>0748720</code></a> fix: prevent quadratic malformed-tag recovery and normalize() adjacent-text m...</li> <li><a href="https://github.com/xmldom/xmldom/commit/7ced40c06c28d151e996a97045018c3559ae4707"><code>7ced40c</code></a> fix: prevent HTML raw-text output amplification via case-insensitive close-ta...</li> <li><a href="https://github.com/xmldom/xmldom/commit/cfb09b5dbeb035fdfedc9f01e2bbaf226bf47cf3"><code>cfb09b5</code></a> fix: prevent quadratic attribute de-duplication via null-prototype membership...</li> <li><a href="https://github.com/xmldom/xmldom/commit/e9dbc6b54c4a9fa83e678647bc1544a505522040"><code>e9dbc6b</code></a> test: characterize NamedNodeMap attribute de-duplication before the index ref...</li> <li><a href="https://github.com/xmldom/xmldom/commit/dabffe884e864eeecb1f515c716f875e1bc47ec1"><code>dabffe8</code></a> fix: prevent quadratic namespace-map memory consumption via prototype-chain i...</li> <li><a href="https://github.com/xmldom/xmldom/commit/7b2ec67e1750daadd0bb06c92e875e726544a362"><code>7b2ec67</code></a> fix: prevent multiline-anchor bypass of name/id validation by dropping the re...</li> <li><a href="https://github.com/xmldom/xmldom/commit/4664386e4f4d99d17b416a151dbe8323e245284b"><code>4664386</code></a> fix: prevent XML injection via unsafe EntityReference name (GHSA-6gmq-8vp8-gcm6)</li> <li>Additional commits viewable in <a href="https://github.com/xmldom/xmldom/compare/0.9.10...0.9.12">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~karfau">karfau</a>, a new releaser for <code>@​xmldom/xmldom</code> since your current version.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/livrasand/gitGost/network/alerts). </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

• livrasand(31 Aug 26)

  Add political neutrality and legal compliance section (#209) Added a section on political neutrality and legal compliance to clarify the project's stance and user responsibilities.

• livrasand(31 Aug 26)

  Remove warning about Android restrictions (#208) Removed warning about Android being under threat and the call to action to keep Android open.

• livrasand(29 Aug 26)

  Update deploy-preview workflow for Fly.io deployment (#207) Updated the checkout action version and modified the setup steps for Flyctl installation.