Commit graph

6106 commits

Author SHA1 Message Date
Mir Arif Hasan
da3b8c5d37
fix(backend): prevent stored XSS via mock server responses and cross-team request moves (#6006)
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-25 16:16:38 +05:30
Mir Arif Hasan
2fcf5b7a5f
chore: security patch for the dependency chain v2026.3.0 (#6013)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-24 16:34:36 +05:30
James George
e03ffc5d85
fix(common): prevent open redirect in enter page (#5982) 2026-03-20 12:41:31 +05:30
Umut Keltek
402955d55f
fix(desktop): add native Edit menu to enable clipboard shortcuts on Linux (#5920)
Co-authored-by: curiouscorrelation <curiouscorrelation@gmail.com>
2026-03-19 23:30:22 +05:30
Daniel Bates
4a61e3464d
fix(common): prevent infinite auth refresh retry loop on permanent token failure (#5893)
Co-authored-by: nivedin <nivedinp@gmail.com>
2026-03-19 23:09:01 +05:30
Nikhil
08921786e7
fix: restore tooltips on icon-only buttons inside popover triggers (#5935)
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-18 15:11:15 +05:30
Chhavi Goyal
f012c31ba2
fix(common): fetch full team collection tree on workspace import (#5792)
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: Nivedin <53208152+nivedin@users.noreply.github.com>
2026-03-17 16:14:51 +05:30
James George
e418a51432
fix(common): prevent stored XSS in team member overflow tooltip (#5984) 2026-03-14 17:26:44 +05:30
Denny Jiang
0bb4824cfa
chore(common): update Chinese translations (#5979)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-13 23:59:14 +05:30
Umut Keltek
be536f0ca3
fix(common): persist OAuth2 code challenge method selection (#5921)
Co-authored-by: Anwarul Islam <anwaarulislaam@gmail.com>
2026-03-13 23:11:13 +05:30
James George
4cbe23cf00 chore: bump version to 2026.2.1 2026-03-04 19:09:52 +05:30
Mir Arif Hasan
a91acdd6bf
fix(backend): bump Prisma packages to 7.4.2 (#5932) 2026-03-04 11:42:59 +05:30
Shekhu☺️
3876fa9682
fix(common): update documentation link for mock server (#5929) 2026-03-03 15:28:24 +05:30
Mir Arif Hasan
1f4ae3dd88
fix(backend): enforce user ownership when deleting PAT (#5916)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-02 23:35:19 +05:30
Mir Arif Hasan
d6ea86dcca
fix(backend): prevent request payload from overriding id and name (#5913)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-03-02 21:50:43 +05:30
Hypo
4594e838d4
fix(common): hide horizontal scrollbar in Firefox for URL input (#5906)
Co-authored-by: nivedin <nivedinp@gmail.com>
2026-03-02 16:58:40 +05:30
James George
1119a2209c chore(common): add no_active_orgs_found locale string 2026-02-26 12:38:51 +05:30
James George
12fea3dd09 chore: ignore AI coding assistant config dirs 2026-02-26 12:38:44 +05:30
Mir Arif Hasan
57be05cdcb
fix(backend): prevent IDOR in user collection and request endpoints (#5902) 2026-02-24 23:32:43 +05:30
Shreyas
02b3dbcf5c
feat(desktop): cloud for orgs platform contract (#5903)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-24 23:21:48 +05:30
iDschepe
5ae9639901
fix(common): increase modal dialog width for more screen sizes (#5884)
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-24 21:03:16 +05:30
Leonic
77e420dc6a
fix(common): resolve TypeError when opening request from search results (#5842)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-24 15:18:13 +05:30
James George
b9064045e8 chore: update lock file 2026-02-24 12:23:14 +05:30
Eve
562d2919ca
fix(common): constrain variable tooltip to viewport for long values (#5878)
Co-authored-by: aviu16 <aviu16@users.noreply.github.com>
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-23 23:33:14 +05:30
James George
c687473889 chore: streamline pnpm versioning 2026-02-23 20:27:07 +05:30
Mir Arif Hasan
803e4633a2
feat: api documentation versioning (#5676)
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-23 20:11:55 +05:30
James George
faf2bfc8eb
feat(common): add foundational support for dropdown-based organization switcher (#5890) 2026-02-23 20:06:10 +05:30
Mir Arif Hasan
a1be60da64
fix(backend): resolve security advisories for IDOR and onboarding bypass (#5897)
Improve error handling in the onboarding status check

---

Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-23 18:11:45 +05:30
James George
55c1cb8290 chore: bump CLI version 2026-02-23 17:47:58 +05:30
James George
a40c491f7a chore: bump version to 2026.2.0 2026-02-23 17:46:08 +05:30
James George
eb4b6a83c5 chore: update lock file 2026-02-23 17:45:37 +05:30
Lubomír Blažek
a37d19bff3
chore(common): update Czech locale with improved translations (#5895) 2026-02-21 14:34:10 +05:30
Shreyas
2e989cf242
chore(common): deprecate legacy interceptor system (#5830) 2026-02-21 14:22:47 +05:30
Leonic
1de672b8bd
feat(sh-admin): add search and pagination to teams list (#5803)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-20 14:13:14 +05:30
Mir Arif Hasan
4fe0e376bb
chore: security patch for the dependency chain v2026.2.0 (#5887)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-19 12:48:50 +05:30
Chandraprakash Pandey
680439a1b0
fix(common): improve responsive layout and overflow in realtime pages (#5843)
Co-authored-by: nivedin <nivedinp@gmail.com>
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-18 14:28:43 +05:30
James George
28a6569f42 chore: merge hoppscotch/patch into hoppscotch/next 2026-02-18 11:34:09 +05:30
James George
a22389cda0
fix: auto-recover from corrupted sandbox state (#5874) 2026-02-18 10:25:47 +05:30
Eve
98aa0368fb
fix(common): correctly resolve secret environment variables in basic auth header (#5879)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-16 18:21:11 +05:30
Kanhaiya Pandey
2ad2f46e6a
feat(common): URL encode/decode context menu actions (#5782)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-16 16:55:47 +05:30
Anwarul Islam
ff906b7c96
fix(common): correctly load mock servers on initialization and workspace change (#5832)
Co-authored-by: James George <25279263+jamesgeorge007@users.noreply.github.com>
2026-02-05 15:39:47 +05:30
James George
20bfac04fe chore: bump CLI version 2026-02-05 12:56:11 +05:30
James George
5310b9fb40
fix(cli): strip module prefix before script execution (#5835) 2026-02-05 10:39:04 +05:30
James George
32114fc8ef chore: bump version to 2026.1.1 2026-02-04 22:54:23 +05:30
Nivedin
809c07e84c
fix(common): correctly populate OpenAPI response examples (#5831) 2026-02-04 22:53:17 +05:30
Mir Arif Hasan
bf11e7ee22
chore(backend): upgrade nodemailer dependency to v8 (#5833) 2026-02-04 18:40:13 +05:30
Mir Arif Hasan
37e9207b43
fix(backend): resolve database connection leak in infra-config operations (#5825) 2026-02-04 17:25:00 +05:30
No jae gun
2dc3463b69
fix(backend): use duration instead of timestamp for auth cookie maxAge (#5821)
The maxAge option in Express's res.cookie() expects a duration in milliseconds, not an absolute timestamp. The previous code was adding `Date.now()` to the validity period, causing cookies to expire decades in the future instead of the intended 1 day / 7 days.

This was particularly problematic on macOS due to stricter cookie handling by Safari/WebKit.

Addresses #5818

Co-authored-by: njg7194 <njg7194@users.noreply.github.com>
2026-02-04 11:08:07 +05:30
Leonic
3c0938da9d
fix(common): prevent support menu from triggering in editors (#5811) 2026-02-03 23:46:08 +05:30
Mayank Jain
fcf31a4fd8
fix: broken scroll on latest chrome versions (#5816)
Co-authored-by: nivedin <nivedinp@gmail.com>
2026-02-03 12:07:54 +05:30