Fringg 454b83138e fix: flood control handling in pinned messages and XSS hardening in HTML sanitizer ...

- Add retry loop with backoff to _unpin_message_for_user (max 3 attempts)
- Add TelegramRetryAfter handling in _send_and_pin_message (unpin + send phases)
- Fix missing failed_count increment when all broadcast retries exhaust (for/else)
- Remove dead code in unpin_active_pinned_message (unreachable TelegramRetryAfter catch)
- Harden sanitize_html: allowlist URI schemes (http/https/tg/mailto/tel), whitelist
  tag attributes, strip all attrs from tags without explicit whitelist, full HTML
  entity decoding via html.unescape

2026-02-12 19:13:40 +03:00

..

__init__.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

cache.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

check_reg_process.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

currency_converter.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

decorators.py

chore: ruff format 7 files

2026-02-11 21:50:49 +03:00

formatters.py

Add initial Persian locale support and language handling updates

2026-02-09 16:53:50 +03:30

log_handlers.py

refactor: remove Flask, use FastAPI exclusively for all webhooks

2026-02-09 21:54:15 +03:00

markdown_to_telegram.py

fix: close unclosed HTML tags when truncating version notification

2026-02-07 08:18:39 +03:00

message_patch.py

perf: cache logo file_id to avoid re-uploading on every message

2026-02-09 18:14:54 +03:00

miniapp_buttons.py

fix: use callback fallback when MINIAPP_CUSTOM_URL is not set

2026-02-11 01:58:40 +03:00

pagination.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

payment_logger.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

payment_utils.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

photo_message.py

refactor: remove smart auto-activation & activation prompt, fix production bugs

2026-02-09 21:39:53 +03:00

price_display.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

pricing_utils.py

chore: ruff format 7 files

2026-02-11 21:50:49 +03:00

promo_offer.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

security.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

startup_timeline.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

subscription_utils.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

telegram_webapp.py

revert: remove signature pop from HMAC validation

2026-02-06 22:27:57 +03:00

timezone.py

Implement panel_datetime_to_naive_utc function

2026-01-28 11:42:45 +03:00

user_utils.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

validators.py

fix: flood control handling in pinned messages and XSS hardening in HTML sanitizer

2026-02-12 19:13:40 +03:00