Auto-escape in Jinaj2 templates was not enabled because the filenames were not something jinja2 enables it for, fixed.

Big thanks to https://github.com/Nguyen-Trung-Kien for finding and reporting the issue.

Full Changelog: https://github.com/dgtlmoon/changedetection.io/compare/0.45.21...0.45.22

Security update - CVE-2024-32651- Server Side Template Injection in Jinja2 allows Remote Command Execution

What's Changed

• error text should contain the word Exception by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2322

Full Changelog: https://github.com/dgtlmoon/changedetection.io/compare/0.45.20...0.45.21

Big thanks to https://github.com/edoardottt for reporting the vulnerability and assisting

What's Changed

• #2312 lxml elementstringresult by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2317

Full Changelog: https://github.com/dgtlmoon/changedetection.io/compare/0.45.19...0.45.20

What's Changed

• module 'lxml.etree' has no attribute '_ElementStringResult' - reimplement _ElementStringResult by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2313

Full Changelog: https://github.com/dgtlmoon/changedetection.io/compare/0.45.18...0.45.19

Minor maintenance release

What's Changed

• Re #2263 "send test notification" from watch edit should respect global settings and tag/group settings by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2289
• Tweaks to tag/groups page by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2290
• Remove unique check for URLs entered on the "quick watch add" form #2286 by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2292
• avoid deprecated message - packing our own strtobool by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2291
• UI - Re #2307 - Adding UI notice if watch has group options set by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2311

Full Changelog: https://github.com/dgtlmoon/changedetection.io/compare/0.45.17...0.45.18

What's Changed

• Updating pyppeteer-ng (mainly newer pillow release to solve Windows install problems) by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2247
• Update contributing documentation for discontinuation of dev branch by @AndrewKvalheim in https://github.com/dgtlmoon/changedetection.io/pull/2272
• UI Updates
• mqtt:// and apprise notification updates

New Contributors

• @AndrewKvalheim made their first contribution in https://github.com/dgtlmoon/changedetection.io/pull/2272

Full Changelog: https://github.com/dgtlmoon/changedetection.io/compare/0.45.16...0.45.17

0.45.16 Python pip build small release - fixes missing files in pip distribution

Full Changelog: https://github.com/dgtlmoon/changedetection.io/compare/0.45.15...0.45.16

What's Changed

• Prefer to use SockPuppetBrowser by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2163
• Fixes for status code and screenshot info by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2168
• Fixes build error "The headers or library files could not be found for jpeg, a required dependency when compiling Pillow from source." by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2176
• Split content fetchers add puppeteer correctly by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2169
• Bump the all group with 1 update by @dependabot in https://github.com/dgtlmoon/changedetection.io/pull/2180
• Misc puppeteer client fixes by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2181
• try to fix the build - Custom browser endpoints should not have a proxy set by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2204
• UI - Sort tag list and list of tags in groups setting by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2205
• Fetching - restock detecting and visual selector scraper - Fixes scraping of elements that are not visible by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2206
• text_json_diff/fix: Keep an order of filter and remove duplicated filters. 2 by @Constantin1489 in https://github.com/dgtlmoon/changedetection.io/pull/2178
• Re #2197 Browser Steps and playwright/puppeteer "headers" fetch fixes (including user-agent if set) by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2212
• Improving test for restock IN STOCK -> OUT OF STOCK by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2219
• fixed typo on select by @pedrogius in https://github.com/dgtlmoon/changedetection.io/pull/2232
• Adding CORS module - solves Chrome extension API integration by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2236

New Contributors

• @pedrogius made their first contribution in https://github.com/dgtlmoon/changedetection.io/pull/2232

Full Changelog: https://github.com/dgtlmoon/changedetection.io/compare/0.45.14...0.45.15

What's Changed

• enable dependabot for github-actions by @apeabody in https://github.com/dgtlmoon/changedetection.io/pull/2119
• Bump the all group with 4 updates by @dependabot in https://github.com/dgtlmoon/changedetection.io/pull/2121
• Restock tweaks - use a single regex, tidy up height detection by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2125
• Bugfix: Notification title being set to notification format, notifiction format not being respected by @TheConner in https://github.com/dgtlmoon/changedetection.io/pull/2129
• Improve status_code logging by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2130
• improvements to change detection logging by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2136
• Adding icon to show which watch has Browser Steps by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2137
• Skip empty notification URLs from being processed by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2138
• RSS - Re #2131 and #327 include link to watch url by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2139
• General test improvements by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2144
• Always record server software reply headers (will be used in the future) by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2143
• Make an obvious error when using BrowserSteps with the simple text fetcher by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2145
• Update stock-not-in-stock.js by @tonineri in https://github.com/dgtlmoon/changedetection.io/pull/2149
• Re #2058 record notification count by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2150
• Filtering - "include filters" deduplicate including duplicate filters from group setting by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2151
• Sort text alphabetically filter by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2153
• elementpath~=4.1 fixes build error by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2164
• Re #2118 fix missing default var by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2162

New Contributors

• @apeabody made their first contribution in https://github.com/dgtlmoon/changedetection.io/pull/2119
• @TheConner made their first contribution in https://github.com/dgtlmoon/changedetection.io/pull/2129
• @tonineri made their first contribution in https://github.com/dgtlmoon/changedetection.io/pull/2149

Full Changelog: https://github.com/dgtlmoon/changedetection.io/compare/0.45.13...0.45.14

Security

• Security patch - Low impact - Adding API token secure check for API endpoint /api/v1/watch/<uuid>/history @rozpuszczalny

What's Changed

Mainly improvements to product restock detection, notification fixes and general application improvements.

• Added OPTIONS HTTP method by @kiyell in https://github.com/dgtlmoon/changedetection.io/pull/2094
• #1627 and #1823 #2099 - quote wrapped URL for browserstep url was breaking the connection by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2100
• Notifications - When any in a list of notifications fails, the others should still work by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2106
• Restock - Check all elements for text to get stock status from, strip any text returned by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2040
• Adding extra test for #2103 by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2108
• Support Loguru as a logger by @Constantin1489 in https://github.com/dgtlmoon/changedetection.io/pull/2036
• Loguru output tweaks by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2112
• Adding contributors section by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2116
• Backups - Tidy up test by @dgtlmoon in https://github.com/dgtlmoon/changedetection.io/pull/2117

New Contributors

• @kiyell made their first contribution in https://github.com/dgtlmoon/changedetection.io/pull/2094

Full Changelog: https://github.com/dgtlmoon/changedetection.io/compare/0.45.12...0.45.13