Amber nodes are monitored by CommitWatch. Gray nodes are sampled from authenticated GitHub public commit search and may not represent complete contribution history.
This commit is a code cleanup/refactor touching three areas: payment-request search, wallet label lookup, and a label-manager icon URL. The most notable change is that the payment-request search no longer compares the user's search text di…
Payment-request search no longer casts Amount column to text for comparison with arbitrary user input; numeric path uses parameterized decimal value.Wallet label query moved from LINQ to raw SQL but still uses parameterized values for walletId, linkedType, and label type.JavaScript fetch call no longer sends credentials: 'include', which changes cross-origin cookie behavior for that request.
This commit is a performance refactor, not a security fix. It replaces many individual database lookups for payment-request labels with a single batched lookup, and makes a couple of minor cleanups (removing a comment, using a switch expre…
No security-relevant code paths alteredNo input validation changesNo authorization or authentication changes
This commit is a routine code cleanup of the wallet address label picker in BTCPay Server. It rewrites how the page caches and refreshes the list of available labels, removes an old Vue.js event listener, and adds a guard so the script doe…
No security framing in commit title or messageNo CVE, advisory, or researcher attribution presentRefactor only: logic flow preserved, no new input validation or output encoding added
This commit adds new UI filters, a label system, and a reporting provider for payment requests. It also changes the search query to use a hand-written SQL statement. The change is described as a feature improvement, not a security fix. The…
Raw SQL introduced via FromSqlRaw in PaymentRequestRepository.FindPaymentRequestsUser-supplied SearchText, LabelFilter, startdate/enddate values flow into repository queriesNew label filtering joins WalletObjectLinks by WalletId/AType/BType/AId
This commit fixes a UI bug in BTCPay Server's wallet address list. Previously, when a user changed labels on a reserved Bitcoin address, the label filter on the page did not update to reflect the new labels, and an error in the label manag…
Fixes client-side state synchronization bug that could cause UI to display stale address labelsNo obvious injection vector: labels are passed through existing label manager, event data is consumed locally by Vue componentCustomEvent detail includes walletObjectId and labels, but is handled within same-origin page context