Fringg dc1e96bbe9 fix: security and architecture fixes for webhook handlers ...

- Add html.escape() to all untrusted webhook data in admin and device
  notifications (prevents HTML/Telegram injection)
- Add public send_webhook_notification() and is_enabled property to
  AdminNotificationService (eliminates private method access)
- Add dedicated NotificationType enum values for device and not_connected
  events (fixes incorrect semantic mapping)
- Extend user resolution to handle nested user objects and userUuid for
  device-scope events
- Replace manual __anext__() DB session with AsyncSessionLocal context
  manager; skip DB session for admin-only events
- Replace deprecated datetime.utcnow() with datetime.now(UTC)
- Use db.flush() instead of db.commit() in handlers (router commits)
- Wrap _notify_user in try/except to prevent notification failures from
  rolling back successful DB mutations

2026-02-10 05:55:48 +03:00

..

__init__.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

payments.py

fix: resolve multiple production errors and performance issues

2026-02-08 17:40:51 +03:00

remnawave_webhook.py

fix: security and architecture fixes for webhook handlers

2026-02-10 05:55:48 +03:00

telegram.py

Add files via upload

2026-02-04 04:48:01 +03:00

unified_app.py

feat: add RemnaWave incoming webhooks for real-time subscription events

2026-02-10 05:13:39 +03:00