Reading the persisted public view.
Datamining / findings
Evidence records derived from public code, builds, assets, APIs or schemas. A detection is not automatically a release, announcement or confirmed feature.
Classification overview
fix(desktop): pin outbound fetches to a validated address (#2359)
fluxer_desktop/src/main/DesktopOutboundHTTP.tsfluxer_desktop/src/main/FileDownloads.tsfluxer_desktop/src/main/NotificationIcon.tsfix(auth): guard stale submissions and rework form error mapping (#2358)
fluxer_app/src/features/app/hooks/useForm.tsfluxer_app/src/features/auth/components/pages/EmailRevertPage.tsxfluxer_app/src/features/auth/components/pages/ForgotPasswordPage.tsxfluxer_app/src/features/auth/components/pages/ResetPasswordPage.tsxfluxer_app/src/features/auth/flow/AuthMinimalRegisterFormCore.tsxfluxer_app/src/features/auth/flow/AuthRegisterFormCore.tsxfluxer_app/src/features/auth/flow/MfaScreen.tsxfluxer_app/src/features/auth/flow/auth_login_core/AuthLoginEmailPasswordForm.tsxfluxer_app/src/features/auth/hooks/useAuthForm.tsfluxer_app/src/features/i18n/locales/ar/messages.pofluxer_app/src/features/i18n/locales/bg/messages.pofluxer_app/src/features/i18n/locales/cs/messages.pofluxer_app/src/features/i18n/locales/da/messages.pofluxer_app/src/features/i18n/locales/de/messages.pofluxer_app/src/features/i18n/locales/el/messages.pofluxer_app/src/features/i18n/locales/en-GB/messages.pofluxer_app/src/features/i18n/locales/en-US/messages.pofluxer_app/src/features/i18n/locales/es-419/messages.pofluxer_app/src/features/i18n/locales/es-ES/messages.pofluxer_app/src/features/i18n/locales/fi/messages.pofluxer_app/src/features/i18n/locales/fr/messages.pofluxer_app/src/features/i18n/locales/he/messages.pofluxer_app/src/features/i18n/locales/hi/messages.pofluxer_app/src/features/i18n/locales/hr/messages.pofluxer_app/src/features/i18n/locales/hu/messages.pofluxer_app/src/features/i18n/locales/id/messages.pofluxer_app/src/features/i18n/locales/it/messages.pofluxer_app/src/features/i18n/locales/ja/messages.pofluxer_app/src/features/i18n/locales/ko/messages.pofluxer_app/src/features/i18n/locales/lt/messages.pofluxer_app/src/features/i18n/locales/nl/messages.pofluxer_app/src/features/i18n/locales/no/messages.pofluxer_app/src/features/i18n/locales/pl/messages.pofluxer_app/src/features/i18n/locales/pt-BR/messages.pofluxer_app/src/features/i18n/locales/ro/messages.pofluxer_app/src/features/i18n/locales/ru/messages.pofluxer_app/src/features/i18n/locales/sv-SE/messages.pofluxer_app/src/features/i18n/locales/th/messages.pofluxer_app/src/features/i18n/locales/tr/messages.pofluxer_app/src/features/i18n/locales/uk/messages.pofluxer_app/src/features/i18n/locales/vi/messages.pofluxer_app/src/features/i18n/locales/zh-CN/messages.pofluxer_app/src/features/i18n/locales/zh-TW/messages.pofix(auth): require a hashed poll secret for desktop handoff (#2357)
fluxer_api/src/api/auth/AuthController.tsfluxer_api/src/api/auth/AuthRequestService.tsfluxer_api/src/api/auth/services/DesktopHandoffService.tsfluxer_api/src/api/auth/tests/DesktopHandoffCodeNormalization.test.tsfluxer_api/src/api/auth/tests/DesktopHandoffFlow.test.tsfluxer_api/src/api/auth/tests/DesktopHandoffNegative.test.tsfluxer_api/src/api/auth/tests/DesktopHandoffUsage.test.tsfluxer_app/src/features/auth/commands/AuthenticationCommands.tsfluxer_app/src/features/auth/flow/BrowserLoginHandoffModal.tsxfluxer_app/src/features/i18n/locales/ar/messages.pofluxer_app/src/features/i18n/locales/bg/messages.pofluxer_app/src/features/i18n/locales/cs/messages.pofluxer_app/src/features/i18n/locales/da/messages.pofluxer_app/src/features/i18n/locales/de/messages.pofluxer_app/src/features/i18n/locales/el/messages.pofluxer_app/src/features/i18n/locales/en-GB/messages.pofluxer_app/src/features/i18n/locales/en-US/messages.pofluxer_app/src/features/i18n/locales/es-419/messages.pofluxer_app/src/features/i18n/locales/es-ES/messages.pofluxer_app/src/features/i18n/locales/fi/messages.pofluxer_app/src/features/i18n/locales/fr/messages.pofluxer_app/src/features/i18n/locales/he/messages.pofluxer_app/src/features/i18n/locales/hi/messages.pofluxer_app/src/features/i18n/locales/hr/messages.pofluxer_app/src/features/i18n/locales/hu/messages.pofluxer_app/src/features/i18n/locales/id/messages.pofluxer_app/src/features/i18n/locales/it/messages.pofluxer_app/src/features/i18n/locales/ja/messages.pofluxer_app/src/features/i18n/locales/ko/messages.pofluxer_app/src/features/i18n/locales/lt/messages.pofluxer_app/src/features/i18n/locales/nl/messages.pofluxer_app/src/features/i18n/locales/no/messages.pofluxer_app/src/features/i18n/locales/pl/messages.pofluxer_app/src/features/i18n/locales/pt-BR/messages.pofluxer_app/src/features/i18n/locales/ro/messages.pofluxer_app/src/features/i18n/locales/ru/messages.pofluxer_app/src/features/i18n/locales/sv-SE/messages.pofluxer_app/src/features/i18n/locales/th/messages.pofluxer_app/src/features/i18n/locales/tr/messages.pofluxer_app/src/features/i18n/locales/uk/messages.pofluxer_app/src/features/i18n/locales/vi/messages.pofluxer_app/src/features/i18n/locales/zh-CN/messages.pofluxer_app/src/features/i18n/locales/zh-TW/messages.popackages/schema/src/domains/auth/AuthSchemas.tspackages/schema/src/domains/auth/DesktopHandoffCode.tsfix(auth): revoke the parsed token on logout (#2356)
fluxer_api/src/api/auth/AuthRequestService.tsfix(platform): parse api error responses in one place (#2355)
fluxer_app/src/features/auth/commands/AuthenticationCommands.tsfluxer_app/src/features/platform/utils/ResponseInspection.tsfix(app-proxy): validate config, csp sources, cap resource use (#2354)
fluxer_app_proxy/src/config.rsfluxer_app_proxy/src/csp.rsfluxer_app_proxy/src/discovery_cache.rsfluxer_app_proxy/src/main.rsfluxer_app_proxy/src/routes/assets_proxy.rsfluxer_app_proxy/src/routes/health.rsfluxer_app_proxy/src/routes/mod.rsfluxer_app_proxy/src/routes/spa_index.rsfluxer_app_proxy/src/routes/spa_static.rsfluxer_app_proxy/src/state.rsfix(gateway): rate limit resume like identify (#2353)
fluxer_gateway/src/gateway/gateway_handler_dispatch.erlfix(gateway): only trust the client ip header when enabled (#2352)
fluxer_gateway/src/gateway/fluxer_gateway_config.erlfluxer_gateway/src/gateway/gateway_handler.erlfix(gateway): bound the zstd decompression window (#2351)
fluxer_gateway/src/gateway/gateway_compress.erlfix(read-state): keep a failed ack dispatch from failing acks (#2350)
fluxer_api/src/api/read_state/ReadStateService.tsfeat(api): serve well-known discovery with etag and 304 (#2349)
fluxer_api/src/api/app/MiddlewarePipeline.tsfluxer_api/src/api/instance/DiscoveryValidators.tsfluxer_api/src/api/instance/InstanceController.tsfluxer_api/src/api/utils/EntityTag.tsfix(auth): bucket phone attempt risk by v4 and v6 subnet (#2348)
fluxer_api/src/api/auth/services/PhoneAttemptRiskService.tsfix(auth): harden login rate keys and totp reuse (#2347)
fluxer_api/src/api/auth/AuthLogin.tsfluxer_api/src/api/auth/AuthMfa.tsfix(api): validate push and domain verification targets (#2346)
fluxer_api/src/api/connection/verification/DomainConnectionVerifier.tsfluxer_api/src/api/user/services/UserContentService.tspackages/schema/src/domains/connection/ConnectionSchemas.tspackages/schema/src/domains/user/UserRequestSchemas.tspackages/schema/src/primitives/UrlValidators.tsfix(api): trust recorded upload types and bound edit sizes (#2345)
fluxer_api/src/api/channel/services/message/AttachmentProcessingService.tsfluxer_api/src/api/channel/services/message/MessagePersistenceService.tsfix(api): bound storage listings, ranges and search paging (#2344)
fluxer_api/src/api/download/DownloadService.tsfluxer_api/src/api/infrastructure/IStorageService.tsfluxer_api/src/api/infrastructure/StorageService.test.tsfluxer_api/src/api/infrastructure/StorageService.tsfluxer_api/src/api/search/MessageSearchResultReconciler.tsfluxer_api/src/api/test/mocks/MockStorageService.tsfluxer_api/src/api/user/controllers/UserContentController.tspackages/schema/src/domains/message/MessageRequestSchemas.tsfix(captcha): drop the body-email contact policy exemption (#2343)
fluxer_api/src/api/middleware/CaptchaMiddleware.tsfix(constants): add captcha, cache and feature headers (#2342)
fluxer_api/src/api/utils/featureUtils.tspackages/constants/src/Headers.tsfix(http-client): validate public addresses at connect time (#2341)
fluxer_api/pkgs/http_client/package.jsonfluxer_api/pkgs/http_client/src/HttpClient.tsfluxer_api/pkgs/http_client/src/PublicInternetRequestUrlPolicy.tspnpm-lock.yamlchore(i18n): resync message catalogs with source (#2340)
fluxer_app/src/features/i18n/locales/ar/messages.pofluxer_app/src/features/i18n/locales/bg/messages.pofluxer_app/src/features/i18n/locales/cs/messages.pofluxer_app/src/features/i18n/locales/da/messages.pofluxer_app/src/features/i18n/locales/de/messages.pofluxer_app/src/features/i18n/locales/el/messages.pofluxer_app/src/features/i18n/locales/en-GB/messages.pofluxer_app/src/features/i18n/locales/en-US/messages.pofluxer_app/src/features/i18n/locales/es-419/messages.pofluxer_app/src/features/i18n/locales/es-ES/messages.pofluxer_app/src/features/i18n/locales/fi/messages.pofluxer_app/src/features/i18n/locales/fr/messages.pofluxer_app/src/features/i18n/locales/he/messages.pofluxer_app/src/features/i18n/locales/hi/messages.pofluxer_app/src/features/i18n/locales/hr/messages.pofluxer_app/src/features/i18n/locales/hu/messages.pofluxer_app/src/features/i18n/locales/id/messages.pofluxer_app/src/features/i18n/locales/it/messages.pofluxer_app/src/features/i18n/locales/ja/messages.pofluxer_app/src/features/i18n/locales/ko/messages.pofluxer_app/src/features/i18n/locales/lt/messages.pofluxer_app/src/features/i18n/locales/nl/messages.pofluxer_app/src/features/i18n/locales/no/messages.pofluxer_app/src/features/i18n/locales/pl/messages.pofluxer_app/src/features/i18n/locales/pt-BR/messages.pofluxer_app/src/features/i18n/locales/ro/messages.pofluxer_app/src/features/i18n/locales/ru/messages.pofluxer_app/src/features/i18n/locales/sv-SE/messages.pofluxer_app/src/features/i18n/locales/th/messages.pofluxer_app/src/features/i18n/locales/tr/messages.pofluxer_app/src/features/i18n/locales/uk/messages.pofluxer_app/src/features/i18n/locales/vi/messages.pofluxer_app/src/features/i18n/locales/zh-CN/messages.pofluxer_app/src/features/i18n/locales/zh-TW/messages.po