mirror of
https://github.com/nestriness/nestri.git
synced 2026-11-08 16:32:27 +02:00
Ships dev to prod. ## Auth - **fix(auth): bound sign-in code sends per mailbox and per caller** (7c200ff) - The send budget was keyed by every submitted form field, so a new field value made a new budget and one mailbox could be sent codes without limit. Claims are now only the claim fields (email, phone); anything else is dropped. - New budget per requesting address: 10 codes per 24 hours. A budget per mailbox does nothing against a caller working through a list of addresses. - Tests cover both cases and fail on the previous code. ## Box - fix(nescope): give Xwayland the box's GL driver selection (a967796) - feat(image): a default browser in the box (714759b) - #460 (871a3e7)