Skip to content

Conversation

@CodeSureUK
Copy link

Introduced GOV Notify as a new notification provider, enabling support for email and SMS notifications via the GOV.UK Notify API. Updated relevant components, configuration, and dependencies to support this integration. This includes a dedicated form for GOV Notify in the notification dialog and backend logic for message handling.

⚠️⚠️⚠️ Since we do not accept all types of pull requests and do not want to waste your time. Please be sure that you have read pull request rules:
https://github.com/louislam/uptime-kuma/blob/master/CONTRIBUTING.md#can-i-create-a-pull-request-for-uptime-kuma

Tick the checkbox if you understand [x]:

  • I have read and understand the pull request rules.

Description

Fixes #(issue)

Type of change

Please delete any options that are not relevant.

  • Bug fix (non-breaking change which fixes an issue)
  • User interface (UI)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (a fix or feature that would cause existing functionality to not work as expected)
  • Other
  • This change requires a documentation update

Checklist

  • My code follows the style guidelines of this project
  • I ran ESLint and other linters for modified files
  • I have performed a self-review of my own code and tested it
  • I have commented my code, particularly in hard-to-understand areas (including JSDoc for methods)
  • My changes generates no new warnings
  • My code needed automated testing. I have added them (this is optional task)

Screenshots (if any)

Please do not use any external image service. Instead, just paste in or drag and drop the image here, and it will be uploaded automatically.

Introduced GOV Notify as a new notification provider, enabling support for email and SMS notifications via the GOV.UK Notify API. Updated relevant components, configuration, and dependencies to support this integration. This includes a dedicated form for GOV Notify in the notification dialog and backend logic for message handling.

Signed-off-by: Toby Liddicoat <toby@codesure.co.uk>
Introduced a toggle in the UI to securely display or edit the GOV Notify API key. Updated the backend to include dynamic subject lines and timestamps in notifications to improve clarity and contextual information for recipients.

Signed-off-by: Toby Liddicoat <toby@codesure.co.uk>
Reformatted code across multiple modules, standardizing string quotes, indentation, and spacing. Improved readability by restructuring blocks and aligning object properties consistently. These changes ensure better code maintainability and follow standard conventions.

Signed-off-by: Toby Liddicoat <toby@codesure.co.uk>
var md4sum = crypto.createHash('md4');
md4sum.update(new Buffer.from(password, 'ucs2'));
var md4sum = crypto.createHash("md4");
md4sum.update(new Buffer.from(password, "ucs2"));

Check failure

Code scanning / CodeQL

Use of password hash with insufficient computational effort High

Password from
an access to password
is hashed insecurely.
Password from
an access to password
is hashed insecurely.
Password from
an access to password
is hashed insecurely.
Password from
an access to password
is hashed insecurely.
var hmac = crypto.createHmac('md5', ntlmhash);
hmac.update(new Buffer.from(username.toUpperCase() + authTargetName, 'ucs2'));
var hmac = crypto.createHmac("md5", ntlmhash);
hmac.update(new Buffer.from(username.toUpperCase() + authTargetName, "ucs2"));

Check failure

Code scanning / CodeQL

Use of a broken or weak cryptographic algorithm High

A broken or weak cryptographic algorithm
depends on
sensitive data from an access to username
.
A broken or weak cryptographic algorithm
depends on
sensitive data from an access to username
.
A broken or weak cryptographic algorithm
depends on
sensitive data from an access to username
.
A broken or weak cryptographic algorithm
depends on
sensitive data from an access to username
.
A broken or weak cryptographic algorithm
depends on
sensitive data from an access to username
.
A broken or weak cryptographic algorithm
depends on
sensitive data from an access to username
.
CodeSureUK and others added 3 commits February 27, 2025 20:08
Standardize spacing for array brackets across the codebase to improve readability and consistency. Additionally, relocate the eslint-disable comment for clarity and ensure proper association with the unused variable declaration.

Signed-off-by: Toby Liddicoat <toby@codesure.co.uk>
Corrected spacing in function parameters and object definitions across multiple files to improve code readability and maintain consistency. No functionality was altered as part of these changes.

Signed-off-by: Toby Liddicoat <toby@codesure.co.uk>
Copy link
Collaborator

@CommanderStorm CommanderStorm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The PR is not currently in a reviewable state:

@CommanderStorm CommanderStorm marked this pull request as draft March 7, 2025 20:55
@CommanderStorm CommanderStorm added the pr:please address review comments this PR needs a bit more work to be mergable label Mar 7, 2025
@CommanderStorm
Copy link
Collaborator

The PR is not currently in a reviewable state

I am going to close this due to the above reasons.
If this changes, feel free to reopen the PR. We can look at it then.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants