kami-parse-server

Adapters

fix: server crashes when receiving file download request with invalid byte range; this fixes a security vulnerability that allows an attacker to impact the availability of the server instance; the fix improves parsing of the range parameter to properly handle invalid range requests ([GHSA-h423-w6qv-2wj3](https://github.com/parse-community/parse-server/security/advisories/GHSA-h423-w6qv-2wj3 )) [skip release] (#8237 )

2022-10-15 00:54:08 +02:00

cli

Adds deprecator (#7303 )

2021-03-30 22:42:34 +02:00

cloud-code

feat: align file trigger syntax with class trigger; use the new syntax Parse.Cloud.beforeSave(Parse.File, (request) => {}), the old syntax Parse.Cloud.beforeSaveFile((request) => {}) has been deprecated (#7966 )

2022-05-29 20:48:55 +02:00

Controllers

fix: brute force guessing of user sensitive data via search patterns (GHSA-2m6g-crv8-p3c6) (#8145 ) [skip release]

2022-09-02 21:43:09 +02:00

Deprecator

fix: depreciate allowClientClassCreation defaulting to true (#7925 )

2022-05-07 21:08:59 +02:00

GraphQL

fix: errors in GraphQL do not show the original error but a general Unexpected Error (#8045 )

2022-06-17 13:40:31 +02:00

LiveQuery

fix: protected fields exposed via LiveQuery (GHSA-crrq-vr9j-fxxh) [skip release] (#8075 )

2022-06-30 12:53:31 +02:00

Options

feat: selectively enable / disable default authentication adapters (#7953 )

2022-05-29 01:50:43 +02:00

Push

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

Routers

fix: server crashes when receiving file download request with invalid byte range; this fixes a security vulnerability that allows an attacker to impact the availability of the server instance; the fix improves parsing of the range parameter to properly handle invalid range requests ([GHSA-h423-w6qv-2wj3](https://github.com/parse-community/parse-server/security/advisories/GHSA-h423-w6qv-2wj3 )) [skip release] (#8237 )

2022-10-15 00:54:08 +02:00

SchemaMigrations

refactor: add missing schema definitions (#7917 )

2022-05-01 04:21:33 +02:00

Security

fix: improve security by deprecating creating users with public access by default (#7319 )

2021-10-08 05:24:20 +02:00

vendor

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

AccountLockout.js

refactor: replace hardcoded error codes with references (#7546 )

2021-10-18 20:19:47 +02:00

Auth.js

fix: live query role cache does not clear when a user is added to a role (#8026 )

2022-06-11 10:21:55 +02:00

batch.js

build: release

2022-03-18 15:17:12 +01:00

cache.js

Use Prettier JS (#5017 )

2018-09-01 13:58:06 -04:00

ClientSDK.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

Config.js

fix: security vulnerability that allows remote code execution (GHSA-p6h4-93qp-jhcm) (#7844 )

2022-03-12 14:47:23 +01:00

cryptoUtils.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

defaults.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

deprecated.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

index.js

feat: add user-defined schema and migrations (#7418 )

2021-11-01 14:28:49 +01:00

KeyPromiseQueue.js

Add KeyPromiseQueue to Push and Job StatusHandlers (#7267 )

2021-03-15 18:51:46 -05:00

logger.js

Fix #6179 Initializing default logger (#6186 )

2019-11-07 17:41:34 -06:00

middlewares.js

build: release

2022-03-18 15:17:12 +01:00

Page.js

Add page localization (#7128 )

2021-02-09 14:03:57 +01:00

ParseMessageQueue.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

ParseServer.js

revert: refactor: allow ES import for cloud string if package type is module (#7691 )

2021-11-10 16:49:47 +01:00

ParseServerRESTController.js

refactor: remove deprecated url.parse() method (#7751 )

2022-01-06 15:26:00 +01:00

password.js

chore: replace bcrypt with @node-rs/bcrypt (#6794 )

2020-07-13 10:08:01 -05:00

PromiseRouter.js

Improve single schema cache (#7214 )

2021-03-16 16:05:36 -05:00

request.js

remove runtime dependency on request (#5076 )

2018-09-23 12:31:08 -04:00

requiredParameter.js

Use Prettier JS (#5017 )

2018-09-01 13:58:06 -04:00

rest.js

Fix: context for afterFind (#7078 )

2020-12-18 14:54:48 +01:00

RestQuery.js

fix: brute force guessing of user sensitive data via search patterns (GHSA-2m6g-crv8-p3c6) (#8145 ) [skip release]

2022-09-02 21:43:09 +02:00

RestWrite.js

fix: session object properties can be updated by foreign user; this fixes a security vulnerability in which a foreign user can write to the session object of another user if the session object ID is known; the fix prevents writing to foreign session objects ([GHSA-6w4q-23cf-j9jp](https://github.com/parse-community/parse-server/security/advisories/GHSA-6w4q-23cf-j9jp )) [skip release] (#8181 )

2022-09-20 02:36:54 +02:00

StatusHandler.js

Add KeyPromiseQueue to Push and Job StatusHandlers (#7267 )

2021-03-15 18:51:46 -05:00

TestUtils.js

Use Prettier JS (#5017 )

2018-09-01 13:58:06 -04:00

triggers.js

feat: align file trigger syntax with class trigger; use the new syntax Parse.Cloud.beforeSave(Parse.File, (request) => {}), the old syntax Parse.Cloud.beforeSaveFile((request) => {}) has been deprecated (#7966 )

2022-05-29 20:48:55 +02:00

Utils.js

fix: sensitive keyword detection may produce false positives (#7881 )

2022-03-24 02:54:07 +01:00