selfpost

Files

T

mixandClaude Opus 5.5 00feb7c1c7 design: help, an allow entry by sender address trusts a claimed address

From the security review of 2026-10-12: the allow list matches the
envelope sender, which nobody authenticates. Help's Filter lists topic
says so and points to client addresses and networks.

check.py: 32 screens, 0 violations.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-12 07:51:49 +03:00

panel-redesign

design: help, an allow entry by sender address trusts a claimed address

2026-10-12 07:51:49 +03:00

panel-ui

release: 1.3.0: 1.3.0-1.3.1: security pass, queue persist, full backup layout

2026-09-22 15:24:52 +03:00

selfpost-icon-16.svg

release: 0.6.0: Delivery detail page, DNS badge, machine metrics, wide layout

2026-09-22 15:24:51 +03:00

selfpost-icon.svg

release: 0.5.0: Pre-1.0 security review, domain-admin role, doc consolidation