sankalp/umami
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,747 Commits 1 Branch 0 Tags
cb9cb27fbec2f315372f41d688e2a4cb0cff716e
Commit Graph
71 Commits
Author SHA1 Message Date
Francis Cao cb9cb27fbe fix(send): reset visit state on session drift and add missing 2FA translations 2026-08-19 22:06:19 -07:00
Francis Cao c3a70b123d fix(relational): prevent orphaned website_event sessions and keep event pagination stable. Closes #4462. 2026-08-18 14:16:03 -07:00
NoiceHax 319a09cdb5 fix(send): keep the root path when REMOVE_TRAILING_SLASH is enabled 
The trailing-slash regex also matched the leading slash of the root URL, so with REMOVE_TRAILING_SLASH set every home page view was stored with an empty url_path: the home page vanished from the paths/entry/exit reports and could not be selected as a funnel step. Skip the match at the start of the path so "/" and "/#hash" are preserved while "/blog/" and "/blog/#hash" are still trimmed.

Closes #4152
 2026-08-17 11:21:07 -07:00
Mike Cao 8efd5d7279 Avoid saving same-domain referrers and resolve path-only referrers correctly 2026-08-03 23:03:52 -07:00
Francis Cao 58ee28a55e remove session recalculate and related queries 2026-07-21 12:33:41 -07:00
Mike Cao cb801230cc Fix identified session ID generation 2026-07-19 10:43:21 -07:00
Francis Cao 7afc4ccf6b session activity identify stitching 2026-07-15 11:20:27 -07:00
Francis Cao 129681ebd7 fix: harden analytics writes and hide internal server errors from client 2026-06-22 22:07:07 -07:00
Francis Cao bf886d6224 Merge pull request #4348 from KadirFiratFTW/fix/4347-information-disclosure-returned-in-response 
fix: Information Disclosure: Internal Prisma & Database Errors Return…
 2026-06-22 16:39:10 -07:00
kadirfiratftw 173f28c677 fix: Information Disclosure: Internal Prisma & Database Errors Returned in API Response 2026-06-23 01:51:44 +03:00
Mike Cao e9925f2e4e Sanitize CSV exports against formula injection 2026-06-03 00:00:37 -07:00
Mike Cao 8bc49a29e3 Fix share token confusion vulnerability 
Cache tokens from /api/send and share tokens were both signed with the same secret and parsed without distinguishing claim types, allowing a public cache token to be replayed as x-umami-share-token to read any website's analytics. Add explicit token type claims (share/cache) and require the matching type when parsing each.
 2026-06-02 14:45:21 -07:00
Francis Cao f6a6d2cc31 performance updates checkpoint 2026-03-05 10:12:30 -08:00
Mike CaoandClaude Opus 4.6 ce9e2416fb Add Web Vitals performance tracking (LCP, INP, CLS, FCP, TTFB) 
End-to-end performance metrics tracking: dedicated database table with
percentile aggregation, tracker collection behind data-perf attribute,
/api/send handling, report API endpoints, and Performance dashboard page
with threshold-based metric cards, time-series chart, and per-page breakdown.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-08 19:25:20 -08:00
Francis Cao e21c1c83bb configure salt rotation period using env vars. Closed #3427 2026-02-05 08:56:12 -08:00
Mike Cao 23ff20a10b Merge pull request #3809 from RaenonX/master 
Allow `browser` / `os` / `device` override in `payload` & return `cache` from `/api/batch`
 2025-12-03 00:01:30 -08:00
RaenonX 805bc57bbb Added browser / os / device override in payload 2025-12-01 04:06:17 +08:00
Mike Cao fa8d8055df Reformatted files with biome. 2025-11-22 22:42:42 -08:00
Maxime-J 14f3db550b Use raw query with on conflict in createSession 2025-11-11 10:32:31 +01:00
Mike Cao dfe969cabe Fixed pixels/links collect. 2025-10-30 12:53:12 -07:00
Mike Cao 767b373484 Fixed issue with read replica initialization. 2025-10-06 14:49:36 -07:00
Mike Cao b9fbbc6453 Split queries into prisma and sql. 2025-09-29 16:55:07 -07:00
Mike Cao 1d7759408f Fixed build. 2025-09-29 15:13:01 -07:00
Francis Cao 8083482ba8 fix response error return type 2025-09-15 10:18:28 -07:00
Mike Cao 303947fe9b Fixed uuid references in schemas. 2025-09-08 15:28:01 -07:00
Mike Cao 56af91950a Updated components build. 2025-09-01 15:59:06 -07:00
Mike Cao 789b8b36d8 Link route. 2025-08-18 22:30:22 -07:00
Mike Cao 0ac8bd41b6 Pixel route. 2025-08-18 15:49:10 -07:00
Mike Cao 8abb470234 Merge branch 'dev' into jajaja 2025-06-18 21:43:58 -07:00
Mike Cao acc323dbc9 Merge pull request #3469 from KrakenWagen/create_session_slow 
improv: Improved performance of send
 2025-06-18 14:29:03 -07:00
Felix Bernal 3a119acd10 improv: Improved performance of send due to slow session creation retrieving session every time. 2025-06-09 14:42:16 +02:00
Mike Cao 0027502707 Merge branch 'dev' into jajaja 
# Conflicts:
#	src/lib/detect.ts
#	src/queries/sql/reports/getRevenue.ts
 2025-06-08 22:26:26 -07:00
Eritque arcus 33110a44ec fix: fix remove trailing slash regex 2025-05-22 00:24:48 -05:00
Eritque arcus 8d483d9283 fix: hash is not included in record 2025-05-22 00:19:50 -05:00
Mike Cao 3f1ecf4c1b Fixed identify. Closes #3409 2025-05-09 16:54:49 -07:00
Francis Cao f522db44f9 add distinct ID to session info, add logic for /undefined 2025-04-29 15:26:08 -07:00
Francis Cao de54290af6 add distinct id to saves and fix schema mapping 2025-04-29 09:31:46 -07:00
Mike Cao d44be466d8 Changed session id generation. 2025-04-25 21:48:59 -07:00
Mike Cao ffa8d8dd88 Merge remote-tracking branch 'origin/dev' into dev 2025-04-25 03:20:00 -07:00
Mike Cao e8a933f80e Updated id logic. 2025-04-25 03:19:37 -07:00
Francis Cao f659450f99 Merge branch 'dev' of https://github.com/umami-software/umami into dev 2025-04-24 22:42:44 -07:00
Francis Cao 12b8ac4272 app and db schema - region rename, hostname move 2025-04-24 22:42:33 -07:00
Mike Cao 0fd2d09dba Merge pull request #3334 from perso182/props-in-session-definition 
Use the props passed to identify to determine sessions
 2025-04-24 19:22:24 -07:00
Francis Cao 7ffb3f7b52 update send and saveEvent with utm/clickIds 2025-04-13 21:45:26 -07:00
perso182 37ae0374d8 Added id as a parameter to identify and include it in the payload. Removed the usage of localstorage 2025-04-01 11:24:06 +02:00
Oleh Astappiev eafd08b4ee fix: move isbot check after body parsing 2025-03-31 22:56:52 +02:00
perso182 2c80aa0b24 Use props passed to identify to define session 2025-03-28 11:02:56 +01:00
Mike Cao 833de1a1af Added decoding to URL elements. 2025-03-07 18:42:15 -08:00
Mike Cao 925c756215 Updated salt methods. 2025-03-01 16:29:35 -08:00
Mike Cao f3ad9a3146 Merge branch 'dev' into allowCreatedDate 2025-03-01 15:21:06 -08:00