multipleof4/ntfy
1
0
Fork 0
mirror of https://github.com/multipleof4/ntfy.git synced 2026-10-12 06:45:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix ACL case sensitivity issues in sqlite

Browse Source
This commit is contained in:
binwiederhier
2026-06-04 10:28:33 -04:00
parent 33e303272a
commit ddb878d985
3 changed files with 60 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/releases.md
+4
View File
@@ -1926,6 +1926,10 @@ and the [ntfy Android app](https://github.com/binwiederhier/ntfy-android/release
### ntfy server v2.24.0 (UNRELEASED)
**Security issues:**
* Fix case-insensitive ACL topic matching on SQLite: an access control rule for `secret` no longer also matches a request for `SECRET`. SQLite's `LIKE` is case-insensitive for ASCII by default; PostgreSQL was unaffected (no ticket)
*
**Features:**
* Add opt-in in-memory ACL cache (`auth-access-cache`) that serves topic authorization without a database round-trip; off by default, intended for high-volume servers