kami-parse-server

Adapters

fix: server crashes when receiving file download request with invalid byte range; this fixes a security vulnerability that allows an attacker to impact the availability of the server instance; the fix improves parsing of the range parameter to properly handle invalid range requests ([GHSA-h423-w6qv-2wj3](https://github.com/parse-community/parse-server/security/advisories/GHSA-h423-w6qv-2wj3 )) [skip release] (#8238 )

2022-10-15 01:06:45 +02:00

cli

Adds deprecator (#7303 )

2021-03-30 22:42:34 +02:00

cloud-code

feat: align file trigger syntax with class trigger; use the new syntax Parse.Cloud.beforeSave(Parse.File, (request) => {}), the old syntax Parse.Cloud.beforeSaveFile((request) => {}) has been deprecated (#7966 )

2022-05-29 20:48:55 +02:00

Controllers

fix: relation constraints in compound queries Parse.Query.or, Parse.Query.and not working (#8203 )

2022-10-24 12:45:17 +02:00

Deprecator

fix: depreciate allowClientClassCreation defaulting to true (#7925 )

2022-05-07 21:08:59 +02:00

GraphQL

feat: add option to change the default value of the Parse.Query.limit() constraint (#8152 )

2022-09-30 00:38:57 +02:00

LiveQuery

feat: liveQuery support for unsorted distance queries (#8221 )

2022-10-12 00:27:29 +02:00

Options

feat: add option to change the default value of the Parse.Query.limit() constraint (#8152 )

2022-09-30 00:38:57 +02:00

Push

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

Routers

fix: server crashes when receiving file download request with invalid byte range; this fixes a security vulnerability that allows an attacker to impact the availability of the server instance; the fix improves parsing of the range parameter to properly handle invalid range requests ([GHSA-h423-w6qv-2wj3](https://github.com/parse-community/parse-server/security/advisories/GHSA-h423-w6qv-2wj3 )) [skip release] (#8238 )

2022-10-15 01:06:45 +02:00

SchemaMigrations

fix: internal indices for classes _Idempotency and _Role are not protected in defined schema (#8121 )

2022-08-05 11:25:02 +02:00

Security

fix: improve security by deprecating creating users with public access by default (#7319 )

2021-10-08 05:24:20 +02:00

vendor

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

AccountLockout.js

refactor: replace hardcoded error codes with references (#7546 )

2021-10-18 20:19:47 +02:00

Auth.js

fix: live query role cache does not clear when a user is added to a role (#8026 )

2022-06-11 10:21:55 +02:00

batch.js

build: release

2022-03-18 15:17:12 +01:00

cache.js

Use Prettier JS (#5017 )

2018-09-01 13:58:06 -04:00

ClientSDK.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

Config.js

refactor: code style fixes with prettier and lint (#8208 )

2022-10-03 13:55:05 +02:00

cryptoUtils.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

defaults.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

deprecated.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

index.js

feat: add user-defined schema and migrations (#7418 )

2021-11-01 14:28:49 +01:00

KeyPromiseQueue.js

Add KeyPromiseQueue to Push and Job StatusHandlers (#7267 )

2021-03-15 18:51:46 -05:00

logger.js

Fix #6179 Initializing default logger (#6186 )

2019-11-07 17:41:34 -06:00

middlewares.js

build: release

2022-03-18 15:17:12 +01:00

Page.js

Add page localization (#7128 )

2021-02-09 14:03:57 +01:00

ParseMessageQueue.js

fix(prettier): Properly handle lint-stage files (#6970 )

2020-10-25 15:06:58 -05:00

ParseServer.js

revert: refactor: allow ES import for cloud string if package type is module (#7691 )

2021-11-10 16:49:47 +01:00

ParseServerRESTController.js

refactor: remove deprecated url.parse() method (#7751 )

2022-01-06 15:26:00 +01:00

password.js

chore: replace bcrypt with @node-rs/bcrypt (#6794 )

2020-07-13 10:08:01 -05:00

PromiseRouter.js

Improve single schema cache (#7214 )

2021-03-16 16:05:36 -05:00

request.js

remove runtime dependency on request (#5076 )

2018-09-23 12:31:08 -04:00

requiredParameter.js

Use Prettier JS (#5017 )

2018-09-01 13:58:06 -04:00

rest.js

Fix: context for afterFind (#7078 )

2020-12-18 14:54:48 +01:00

RestQuery.js

fix: brute force guessing of user sensitive data via search patterns (GHSA-2m6g-crv8-p3c6) (#8146 ) [skip release]

2022-09-02 21:43:31 +02:00

RestWrite.js

fix: session object properties can be updated by foreign user; this fixes a security vulnerability in which a foreign user can write to the session object of another user if the session object ID is known; the fix prevents writing to foreign session objects ([GHSA-6w4q-23cf-j9jp](https://github.com/parse-community/parse-server/security/advisories/GHSA-6w4q-23cf-j9jp )) [skip release] (#8180 )

2022-09-20 02:23:49 +02:00

StatusHandler.js

Add KeyPromiseQueue to Push and Job StatusHandlers (#7267 )

2021-03-15 18:51:46 -05:00

TestUtils.js

Use Prettier JS (#5017 )

2018-09-01 13:58:06 -04:00

triggers.js

feat: align file trigger syntax with class trigger; use the new syntax Parse.Cloud.beforeSave(Parse.File, (request) => {}), the old syntax Parse.Cloud.beforeSaveFile((request) => {}) has been deprecated (#7966 )

2022-05-29 20:48:55 +02:00

Utils.js

fix: sensitive keyword detection may produce false positives (#7881 )

2022-03-24 02:54:07 +01:00