sankalp/umami
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,458 Commits 1 Branch 0 Tags
475d9548de5960262394ddd0db39e54e32d6340b
Commit Graph
354 Commits
Author SHA1 Message Date
Mike Cao 475d9548de Reject oversized replay payloads and chunk recorder flushes 2026-06-10 23:18:50 -07:00
Mike Cao 8227589ad9 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-06-09 23:07:24 -07:00
Mike Cao 0c0a3aee65 Propagate unlimited website entitlement through subscription checks 2026-06-09 13:32:52 -07:00
Francis Cao 2df051e216 fix sharetoken permissions for pixels,links,boards, and failed routes 2026-06-08 19:16:01 -07:00
Mike Cao f09df3cf14 Remove unused config property. 2026-06-04 20:15:57 -07:00
Mike Cao 8a39e98961 Merge pull request #4283 from mturac/fix/3549-runtime-login-env 
fix: evaluate login mode env at runtime
 2026-06-03 23:51:21 -04:00
Mike Cao d659c5746b Merge pull request #4317 from umami-software/opencode/nimble-planet 
Fix board share entity authorization
 2026-06-03 23:43:48 -04:00
Mike Cao c0193ad7cd Address board share review feedback 2026-06-03 20:29:08 -07:00
Mike Cao a5f4a39f2b Fix board share entity authorization 2026-06-03 00:02:54 -07:00
Mike Cao e9925f2e4e Sanitize CSV exports against formula injection 2026-06-03 00:00:37 -07:00
Mike Cao 306ca4a435 Lint format files. Updated rng function. 2026-06-02 22:35:07 -07:00
Mike Cao 5bf1792b38 Restrict team owner assignment to admins 2026-06-02 22:17:10 -07:00
Mike Cao 44c6b4427f Add schema to realtime route. 2026-06-02 22:07:46 -07:00
Mike Cao 46819a4443 Enforce team role hierarchy on user updates and removals 2026-06-02 21:32:34 -07:00
Mike Cao fded75f940 Use authenticated Redis key on logout 2026-06-02 17:46:08 -07:00
Mike Cao 72611027b7 Merge pull request #4316 from umami-software/codex/umami-GHSA-w7hf-qxh9-2cm3 
Limit batch API payloads to 500 items
 2026-06-02 19:59:21 -04:00
Mike Cao 9ba5fb7c1b Limit batch API payloads to 500 items 2026-06-02 16:54:35 -07:00
Mike Cao ade0819be1 Tighten API access checks by website section and share permissions 2026-06-02 15:29:23 -07:00
Mike Cao 8bc49a29e3 Fix share token confusion vulnerability 
Cache tokens from /api/send and share tokens were both signed with the same secret and parsed without distinguishing claim types, allowing a public cache token to be replayed as x-umami-share-token to read any website's analytics. Add explicit token type claims (share/cache) and require the matching type when parsing each.
 2026-06-02 14:45:21 -07:00
Mike Cao c41bf7c93e Enforce cloud website limits by subscription tier 2026-05-26 20:45:07 -07:00
Francis Cao b5d56a2a29 remove unused replay snapshot path before merge 2026-05-22 11:09:57 -07:00
Francis Cao 5bd92ce950 implement sepearte replay/heatmap enabled routes and collection 2026-05-19 15:46:01 -07:00
Francis Cao 6de5adaefc POC for playwright based screenshots for heatmaps 2026-05-19 11:32:15 -07:00
Francis Cao 1f3f805a30 WIP heatmap full-page coordinate and replay rendering work 2026-05-19 09:05:11 -07:00
mehmet turac 65c46968ad fix: evaluate login mode env at runtime 2026-05-17 04:52:02 +03:00
Mike Cao 1dda7bddcd Merge pull request #4142 from nielskaspers/fix/issue-3981-case-insensitive-login 
fix: make username login case-insensitive
 2026-05-14 23:49:04 -04:00
Francis Cao cd20b3aafd Heatmaps bug fixes, update schema to match overlay, use react-zen component to match ui/ux, polish 2026-05-14 14:23:41 -07:00
Mike Cao c6733897b4 Fetch recorder settings from website config endpoint 2026-05-14 03:26:24 -07:00
Francis Cao b7e1d902f4 seperate revenue queries for better api/performance. Fix realtime css/ui issues. 2026-05-12 16:44:12 -07:00
Mike Cao 6c2155d496 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2026-05-07 14:54:25 -07:00
Mike Cao 9b18511af0 Merge branch 'heatmaps' into dev 
# Conflicts:
#	db/clickhouse/schema.sql
 2026-05-07 14:49:21 -07:00
Francis Cao 9b099408c2 add share page options enable filtering and enforce theme 2026-05-07 13:24:45 -07:00
Francis Cao 5ccfb6d0a5 implement datatable sorting on non-analytics tables. (website/board/link/pixel/team/admin) 2026-05-07 10:46:03 -07:00
Francis Cao f463a4ce3f rename propertyName parameter 2026-05-05 10:48:56 -07:00
Mike Cao c7f71e5758 Make heatmaps report always available. 2026-05-05 10:43:39 -07:00
Mike Cao 12c10c48cd Gate heatmaps report on UMAMI_SELF_RECORD. 2026-05-04 13:29:53 -07:00
Francis CaoandCopilot 00c0273500 fix clickhouse filtering on event_name 
Co-authored-by: Copilot <copilot@github.com>
 2026-05-01 13:16:30 -07:00
Francis Cao d5c48ee75f clean-up session property string charts and insights. 2026-05-01 12:09:22 -07:00
Francis Cao 1f2bd7cad9 fix property filter css. format date columns in pivot table 2026-05-01 10:00:30 -07:00
Francis Cao 680a1ca1a2 refactor Property components to be resused for both session/event data. Implement session-data screens + filtering. Remove all event-data specific compoenents/queries 2026-04-29 13:11:03 -07:00
Mike Cao a6b13b71db Add click heatmaps report 
Extracts click events from rrweb session-replay buffers at write time
into a new heatmap_event table (Prisma + ClickHouse). New /heatmaps
report shows a page picker plus an overlay of click density on the
dominant viewport, with an optional iframe of the live page behind.
 2026-04-27 22:20:38 -07:00
Francis Cao 9da332c489 Add Property filters for booleans, dates, arrays 2026-04-27 13:31:47 -07:00
Francis Cao afa878cd3a include team-manager in includeTeams option 2026-04-27 11:02:00 -07:00
Francis Cao 5a1ef5e674 add event-data support and charts for arrays, booleans, dates 2026-04-24 15:04:59 -07:00
Francis Cao 77dda7268e add event-data property filtering 2026-04-24 11:39:40 -07:00
Francis Cao be6154cb68 Event data properties refactor and design 2026-04-23 11:15:59 -07:00
Francis Cao 66a5881fde fix sessionreplay seek issues 2026-04-15 19:56:50 -07:00
Francis Cao a87d899e17 fix sharetoken permissions on mixed boards 2026-04-13 11:32:47 -07:00
Francis Cao 5e6f88f123 fix board share permissions 2026-04-13 11:15:28 -07:00
Niels Kaspers 7ca24786e8 fix: make username login case-insensitive (#3981) 
Normalize usernames to lowercase on lookup, creation, and update.
Also fix variable shadowing bug and same-user update check in
the user update endpoint.
 2026-04-08 09:14:41 +03:00