All pull requests

Pull requests

• Store the full tcp-probe record on the Session

  #3668·goastler opened Oct 30, 2026Member·

  ·
  

• Experimental: providers answer siteverify with the site's secret key

  #3648·HughParry opened Oct 29, 2026Contributor·

  ·
  

• Rebuild Mongo indexes whose definition changed instead of leaving the stale one

  #3645·goastler opened Oct 29, 2026Member·

  ·
  

• Parse untrusted numbers, JSON, bigints and dates strictly

  #3638·goastler opened Oct 28, 2026Member·

  ·
  

• Load the detector from an https URL with a script tag (experimental)

  #3514·HughParry opened Oct 14, 2026Contributor·

  ·
  

• Let each node set its own mongo cache size

  #3494·forgetso opened Oct 6, 2026Member·

  ·
  13

  

• API router: don't hide errors that happen after the response started

  #3396·goastler opened Sep 25, 2026Member·

  ·
  

• Access rules: escape values in Redis search queries

  #3392·goastler opened Sep 25, 2026Member·

  ·
  

• Provider: rate-limit on verified identities, not values the caller chooses

  #3390·goastler opened Sep 25, 2026Member·

  ·
  

• Logger: stop changing the data you log, and survive circular data

  #3365·goastler opened Sep 25, 2026Member·

  ·
  

• Bundle: only boot once when the script is added after page load

  #3349·goastler opened Sep 25, 2026Member·

  ·
  

• feat(caddy): forward request header order to the provider

  #3290·HughParry opened Sep 17, 2026Contributor·

  ·
  

• fix(docker): mount the redis config that actually exists

  #3285·forgetso opened Sep 16, 2026Member·

  ·
  27

  

• feat(provider): let a site bypass key skip the captcha

  #3256·HughParry opened Sep 15, 2026Contributor·

  ·
  

• perf(docker): pin provider1 to dedicated cores; sidecars share the rest

  #3046·forgetso opened Aug 12, 2026Member·3 tasks·

  ·
  22

  

• ci: cancel in-flight runs when a PR is converted to draft

  #3033·goastler opened Aug 11, 2026Member·

  ·
  

• feat(health): add consistent /health and /auth/health endpoints to provider API

  #3023·goastler opened Aug 10, 2026Member·

  ·
  

• refactor(types): name the captcha-type sets and group per-challenge session settings

  #2967·HughParry opened Aug 3, 2026Contributor·

  ·
  10

  

• feat(user-access-policy): arbitrary-header match dimension for access rules

  #2795·HughParry opened Jul 2, 2026Contributor·

  ·
  4

  

• build: split build outputs into per-concern dist subdirs

  #2792·goastler opened Jul 1, 2026Member·

  ·
  

• Tag request records with requestType and rename UserCommitment to ImageCaptcha

  #2635·HughParry opened Jun 4, 2026Contributor·

  ·