summaryrefslogtreecommitdiff
path: root/source/net
AgeCommit message (Collapse)Author
2026-07-14Server-validated X-Real-IP proxy handling, publicPort lifecycle fix, ↵Michael Peter Christen
peer-statistic iam parameter, transfer-IP fallback, and matching tests/docs
2026-07-12proper IP recognition using header X-Real-IP when YaCy is behind aMichael Peter Christen
reverse proxy
2026-07-12Migrated to Solr 9.10.1 and Lucene 9.12.3Michael Peter Christen
2026-07-12Downgraded YaCy to Jetty 12.0.37Michael Peter Christen
2026-07-12Migration to Jetty 12.1.11Michael Peter Christen
2026-07-12towards a Jetty 9 decoupling baseline for the Jetty 12 migrationMichael Peter Christen
2026-07-11isolate Solr 9.0 Jetty client dependencies in a relocated bridgeMichael Peter Christen
2026-07-11de-coupling of security functions from jettyMichael Peter Christen
2026-07-11transform Handler into Servlet-FilterMichael Peter Christen
to further remove dependencies from jetty
2026-07-11Added a server interface which is now implemeted by jetty 9Michael Peter Christen
This will enable a better transition once we migrate to jetty 10
2026-07-11removed unnecessary use of jettyMichael Peter Christen
this is to reduce dependency on jetty before we migrate jetty
2026-07-11cleaned up user authenticationMichael Peter Christen
this removes the userDB-exception in the normal authentication process which affected mostly wiki and blog which are not required any more. We also cleaned up translation messages as this function was not used at all. This is a required step forward a renovation of the jetty server.
2026-07-10migrated jcifs, mime4j to latestMichael Peter Christen
2026-07-10We migrate to JDK 17Michael Peter Christen
This is a hard requirement to be able to migrate to a more recent jetty version, which may happen sometime soon.
2026-07-10fixed language selector and translations for the selectorMichael Peter Christen
2026-07-09enhanced Network Graph CachingMichael Peter Christen
2026-07-09Complete Chinese, Hindi, Japanese, and Korean translations.Michael Peter Christen
2026-07-07Major fix for localization: finalizing German, French, Spanish, Italian,Michael Peter Christen
Greek, Slovak, Ukrainian, Turkish and Russian. Also added full support for Polish language. All servlets are now fully supported by those languages.
2026-07-07fix for spelling in web pages, fixes in locale translations, addedMichael Peter Christen
missing pages in de-locale, removed translation for non-existing pages
2026-07-05better distinct between num_ctx and max_tokensMichael Peter Christen
2026-07-05another report fixMichael Peter Christen
2026-07-05setting max_tokens per modelMichael Peter Christen
2026-07-05fixed shutdown problemMichael Peter Christen
2026-07-05removed the snapshot feature and all dependencies from non-java codeMichael Peter Christen
2026-07-05enhanced logging (to be used in self-enhancement reports)Michael Peter Christen
2026-07-05IPv6-aware fixesMichael Peter Christen
not a full IPv6 support fix, but changes towards
2026-07-04fix for timeoutMichael Peter Christen
2026-07-04enhanced log reports generationMichael Peter Christen
2026-07-04fix for memory settingMichael Peter Christen
2026-07-04Enhanced Log ReportsMichael Peter Christen
2026-07-04added llm proxy servlet to augment the RAGProxyServlet with adminMichael Peter Christen
access. We need this to do remote LLM inference configuration.
2026-07-04Merge branch 'master' of https://github.com/yacy/yacy_search_server.gitMichael Peter Christen
2026-06-28added log report generator for recursive self-improvementMichael Peter Christen
2026-05-31Merge branch 'master' of https://github.com/yacy/yacy_search_serverMichael Peter Christen
2026-05-31added update_plan toolMichael Peter Christen
2026-05-25Merge pull request #783 from songproducer/improve/late-page-qualityMichael Christen
fix: scale nodeStack capacity with query offset so late pages aren't …
2026-05-25Merge pull request #775 from songproducer/fix/xss-reflected-inputMichael Christen
fix: HTML-escape reflected user input and crawled document metadata to prevent XSS (#401, #630)
2026-05-23Merge pull request #777 from songproducer/fix/system-prompt-js-escapeMichael Christen
Fix JS syntax error when system prompt contains single quotes
2026-05-16added experimental artifact envelope tool and plotterMichael Peter Christen
2026-04-25fix: scale nodeStack capacity with query offset so late pages aren't evictedLeo Treasure
WeakPriorityBlockingQueue evicts lowest-scoring entries when full. With a fixed 150-slot nodeStack, page 2+ results compete against page 1 results and high-quality late-page candidates get evicted before ranking completes. Adding query.offset + query.itemsPerPage() to the initial capacity ensures enough slots exist for the requested page's candidates to survive. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-22Fix JS syntax error when system prompt contains single quotesLeo Treasure
2026-04-20fix: run blacklist import in background thread to avoid UI freeze (#625)Leo
The add operation iterated over all selected items, parsed them, and wrote to disk inline on the servlet thread. For large blacklists this blocked the whole request. Now: read all item strings from post before returning (thread safety), hand off the parse+write work to a daemon thread, and redirect immediately. Failures are logged via ConcurrentLog.warn instead of silently dropped. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-20fix: HTML-escape crawled document metadata in ViewFile parsed view to ↵Leo
prevent XSS (#630) dc_title, dc_creator, dc_subject, dc_description, dc_publisher, dc_format, and dc_identifier were all written with prop.put() and rendered unescaped in HTML <dd> elements. A malicious page title like <script>... would execute in the viewer's browser. Switch to prop.putHTML() for all dc_* metadata fields. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-20fix: HTML-escape prefermaskfilter in early-return path to prevent reflected ↵Leo
XSS (#401) In the early return path (no index / search not allowed), prefermaskfilter was reflected into value="#[prefermaskfilter]#" in yacysearch.html using prop.put(), allowing attribute-breaking XSS. The normal search path already used putHTML; apply the same to the early-return path. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-29Add thinking/tooling/vision/format model capability tests and suppress ↵Michael Peter Christen
thinking across LLM calls
2026-03-29better ranking for local hits with more contextMichael Peter Christen
2026-03-29Restore tool-enabled chat requests from persisted model capabilitiesMichael Peter Christen
2026-03-29Add configurable maximum length for RAG search documentsMichael Peter Christen
2026-03-28enhanced tooling/vision testing: persisting all testsMichael Peter Christen
2026-03-28Add search tool backed by shared RAG search document outputMichael Peter Christen
generated by cgit v1.2.3 (git 2.46.0) at 2026-08-08 10:22:03 +0000