{"push_id":1214979020,"size":54,"distinct_size":30,"ref":"refs/heads/prepare-notification","head":"420baf383df8cb0c41dd6a00208ac3c33a1323f8","before":"dbf9338b4c9035778fa0132ae7133b336428741c","commits":[{"sha":"ed92930ded9c5a333f1e55c5221f10c636d8f56d","author":{"name":"Steve Clay","email":"5eb4f8ae09d1b5661f1add989b1c3fabe443bd83@mrclay.org"},"message":"security(routing): HTML escapes URL segments\n\nJust in case a developer unwisely injects URL content directly into HTML,\nwe escape `&\"'<>` with HTML entities.","distinct":false,"url":"https://api.github.com/repos/hypeJunction/Elgg/commits/ed92930ded9c5a333f1e55c5221f10c636d8f56d"},{"sha":"150710184b27990dbce31d4d37c87029fff7a6d1","author":{"name":"Ismayil Khayredinov","email":"2fc73e0030aa33e169462c6a84ae6c4df2daedb7@gmail.com"},"message":"feature(http): adds a service for signing and validating URLs\n\nURLs can now be signed with a HMAC key and validated at a later stage using\nelgg_http_get_signed_url() and elgg_http_validate_signed_url().\n\nFixes #9884","distinct":true,"url":"https://api.github.com/repos/hypeJunction/Elgg/commits/150710184b27990dbce31d4d37c87029fff7a6d1"},{"sha":"6ad8ff9431c97838ac6aa3aa30e923dbedda8a13","author":{"name":"Ismayil Khayredinov","email":"2fc73e0030aa33e169462c6a84ae6c4df2daedb7@gmail.com"},"message":"feat(passwords): strengthen change password link with a HMAC signature\n\nChange password URL is now generated with a HMAC signature reducing the risk of\nunathorized password reset","distinct":true,"url":"https://api.github.com/repos/hypeJunction/Elgg/commits/6ad8ff9431c97838ac6aa3aa30e923dbedda8a13"},{"sha":"111f72d8b68e72fe453fa1f0b2cbdcd5dd116e76","author":{"name":"Ismayil Khayredinov","email":"2fc73e0030aa33e169462c6a84ae6c4df2daedb7@gmail.com"},"message":"feat(uservalidationbyemail): validation URLs are now signed with a HMAC key\n\nLinks sent in an email are now signed with a HMAC key, instead of a custom\ncode sent with a URL query.","distinct":true,"url":"https://api.github.com/repos/hypeJunction/Elgg/commits/111f72d8b68e72fe453fa1f0b2cbdcd5dd116e76"},{"sha":"cbecd704b8b66f455e6bf66e065fcb7f0125e976","author":{"name":"Steve Clay","email":"5eb4f8ae09d1b5661f1add989b1c3fabe443bd83@mrclay.org"},"message":"security(web_services): increase entropy of API keys","distinct":false,"url":"https://api.github.com/repos/hypeJunction/Elgg/commits/cbecd704b8b66f455e6bf66e065fcb7f0125e976"},{"sha":"148cf90b556e2b9b05d1ba14716717df2b238d4d","author":{"name":"Steve Clay","email":"5eb4f8ae09d1b5661f1add989b1c3fabe443bd83@mrclay.org"},"message":"chore(views): more unique textarea IDs in input/longtext","distinct":false,"url":"https://api.github.com/repos/hypeJunction/Elgg/commits/148cf90b556e2b9b05d1ba14716717df2b238d4d"},{"sha":"4327a4db0059fc646eb2abfa64214d2549d40b0d","author":{"name":"Juho Jaakkola","email":"0c8757984aba1fe4d579029465198afef313042f@elgg.org"},"message":"chore(icons): make sure BC tweaks affect only the 'icon' image type\n\nFixes #9942","distinct":false,"url":"https://api.github.com/repos/hypeJunction/Elgg/commits/4327a4db0059fc646eb2abfa64214d2549d40b0d"},{"sha":"45b2da78a4b9e26f91ad61c77dac9953f69d9330","author":{"name":"Ismayil Khayredinov","email":"616e881177e53541ea47e5917a60deb2554e079d@hypejunction.com"},"message":"Merge pull request #9971 from juho-jaakkola/icon_cropping\n\nchore(icons): make sure BC tweaks affect only the 'icon' image type","distinct":false,"url":"https://api.github.com/repos/hypeJunction/Elgg/commits/45b2da78a4b9e26f91ad61c77dac9953f69d9330"},{"sha":"4f6a0174779abc11c6d92e54a107899aa30ef5a3","author":{"name":"jdalsem","email":"29df52cd5cdb5e478b2fc0cad88a2c21d76e5391@coldtrick.com"},"message":"fix(js): add missing elgg/lightbox#resize method\n\nAdds the missing proxy elgg/lightbox#resize method so that\nplugins no longer need to use $.colorbox directly","distinct":false,"url":"https://api.github.com/repos/hypeJunction/Elgg/commits/4f6a0174779abc11c6d92e54a107899aa30ef5a3"},{"sha":"e85b5214e5b93629e4b3c2091860736deaf4f1aa","author":{"name":"Steve Clay","email":"5eb4f8ae09d1b5661f1add989b1c3fabe443bd83@mrclay.org"},"message":"Merge pull request #9979 from hypeJunction/lightbox-resize-2.2\n\nfix(js): add missing elgg/lightbox#resize method","distinct":false,"url":"https://api.github.com/repos/hypeJunction/Elgg/commits/e85b5214e5b93629e4b3c2091860736deaf4f1aa"},{"sha":"00520724918e4d21eae9f438ee5bbdc686567de9","author":{"name":"Steve Clay","email":"5eb4f8ae09d1b5661f1add989b1c3fabe443bd83@mrclay.org"},"message":"Merge pull request #9954 from mrclay/longtext_counter\n\nchore(views): ensure unique textarea IDs in input/longtext","distinct":false,"url":"https://api.github.com/repos/hypeJunction/Elgg/commits/00520724918e4d21eae9f438ee5bbdc686567de9"},{"sha":"590fade6c5b945ef2216000cf6e9c282e4146faa","author":{"name":"Steve Clay","email":"5eb4f8ae09d1b5661f1add989b1c3fabe443bd83@mrclay.org"},"message":"Merge pull request #9953 from mrclay/api_key_strength\n\nsecurity(web_services): increase entropy of API keys","distinct":false,"url":"https://api.github.com/repos/hypeJunction/Elgg/commits/590fade6c5b945ef2216000cf6e9c282e4146faa"},{"sha":"6fd53ac9ea57c58e720b5507883b78c4671d316a","author":{"name":"Steve Clay","email":"5eb4f8ae09d1b5661f1add989b1c3fabe443bd83@mrclay.org"},"message":"Merge pull request #9949 from mrclay/escape_segments_112\n\nsecurity(routing): HTML escapes URL segments","distinct":false,"url":"https://api.github.com/repos/hypeJunction/Elgg/commits/6fd53ac9ea57c58e720b5507883b78c4671d316a"},{"sha":"6e5af7e3a1ad3a9f5e6c03c8b3a2cc03a7820681","author":{"name":"Steve Clay","email":"5eb4f8ae09d1b5661f1add989b1c3fabe443bd83@mrclay.org"},"message":"Merge branch '1.12' into merge112","distinct":false,"url":"https://api.github.com/repos/hypeJunction/Elgg/commits/6e5af7e3a1ad3a9f5e6c03c8b3a2cc03a7820681"},{"sha":"969d373715153073762237a3dbe810eed07b9568","author":{"name":"Steve Clay","email":"5eb4f8ae09d1b5661f1add989b1c3fabe443bd83@mrclay.org"},"message":"Merge pull request #9989 from mrclay/merge112\n\nMerge 1.12 into 2.1","distinct":false,"url":"https://api.github.com/repos/hypeJunction/Elgg/commits/969d373715153073762237a3dbe810eed07b9568"},{"sha":"f20f0603de19211d4a2ae5597fc182cd83aa3a93","author":{"name":"Steve Clay","email":"5eb4f8ae09d1b5661f1add989b1c3fabe443bd83@mrclay.org"},"message":"fix(views): issue unique IDs in elgg_view_input()\n\nIDs should be sufficiently (not cryptographically) unique even across multiple\nrequests.\n\nFixes #9955","distinct":false,"url":"https://api.github.com/repos/hypeJunction/Elgg/commits/f20f0603de19211d4a2ae5597fc182cd83aa3a93"},{"sha":"b67644983f6453eb9f44f4fc26f672410ee2fc49","author":{"name":"Steve Clay","email":"5eb4f8ae09d1b5661f1add989b1c3fabe443bd83@mrclay.org"},"message":"Merge pull request #9956 from mrclay/9955_uids\n\nfix(views): issue unique IDs in elgg_view_input()","distinct":false,"url":"https://api.github.com/repos/hypeJunction/Elgg/commits/b67644983f6453eb9f44f4fc26f672410ee2fc49"},{"sha":"e64dc2984f1e68933ace426baf5b338971680bd6","author":{"name":"Steve Clay","email":"5eb4f8ae09d1b5661f1add989b1c3fabe443bd83@mrclay.org"},"message":"Merge branch '2.1' into merge21","distinct":false,"url":"https://api.github.com/repos/hypeJunction/Elgg/commits/e64dc2984f1e68933ace426baf5b338971680bd6"},{"sha":"0becdedc0944b36461fa4f91c1f89f9ec859d79d","author":{"name":"Steve Clay","email":"5eb4f8ae09d1b5661f1add989b1c3fabe443bd83@mrclay.org"},"message":"Merge pull request #9990 from mrclay/merge21\n\nMerge 2.1 into 2.2","distinct":false,"url":"https://api.github.com/repos/hypeJunction/Elgg/commits/0becdedc0944b36461fa4f91c1f89f9ec859d79d"},{"sha":"4b08df70655984db370489ae9de546b50ff010c3","author":{"name":"Steve Clay","email":"5eb4f8ae09d1b5661f1add989b1c3fabe443bd83@mrclay.org"},"message":"Merge branch '2.2' into merge22","distinct":false,"url":"https://api.github.com/repos/hypeJunction/Elgg/commits/4b08df70655984db370489ae9de546b50ff010c3"}]}
{"actor":{"display_login":"hypeJunction"}}