Mealie is a self hosted recipe manager and meal planner with a RestAPI backend and a reactive frontend application built in Vue for a pleasant user experience for the whole family. Easily add recipes into your database by providing the url and mealie will automatically import the relevant data or add a family recipe with the UI editor
Find a file
Hayden 13850cda1f
security: multiple reported CVE fixes (#1515)
* update out of date license

* update typing / refactor

* fix arbitrarty path injection

* use markdown sanatizer to prevent XSS CWE-79

* fix CWE-918 SSRF by validating url and mime type

* add security docs

* update recipe-scrapers

* resolve DOS from arbitrary url

* update changelog

* bump version

* add ref to #1506

* add #1511 to changelog

* use requests decoder

* actually fix encoding issue
2022-07-31 13:10:20 -08:00
.devcontainer Improve devcontainer and configure VSCode debugging (#1060) 2022-03-16 08:37:56 -08:00
.github feat: re-write get all routes to use pagination (#1424) 2022-06-25 11:39:38 -08:00
.vscode add security.md 2022-05-31 08:29:45 -08:00
alembic feat: mealplan-webhooks (#1403) 2022-06-17 13:25:47 -08:00
dev feat: admin maintenance and analytics stubs (#1107) 2022-03-29 08:25:28 -08:00
docs security: multiple reported CVE fixes (#1515) 2022-07-31 13:10:20 -08:00
frontend security: multiple reported CVE fixes (#1515) 2022-07-31 13:10:20 -08:00
mealie security: multiple reported CVE fixes (#1515) 2022-07-31 13:10:20 -08:00
tests security: multiple reported CVE fixes (#1515) 2022-07-31 13:10:20 -08:00
.dockerignore Feature/CRF++ and server side locales (#731) 2021-10-09 13:08:23 -08:00
.flake8 capture #1043 (#1055) 2022-03-15 12:51:15 -08:00
.gitattributes v0.2.0 (#143) 2021-02-08 09:47:40 -09:00
.gitignore Refactor/conver to controllers (#923) 2022-01-13 13:06:52 -09:00
.pre-commit-config.yaml Feature/user seedable foods (#1176) 2022-05-01 12:45:50 -08:00
.pylintrc Feature/group based notifications (#918) 2022-01-09 21:04:24 -09:00
alembic.ini Chore/update alembic file format (#1056) 2022-03-15 13:11:22 -08:00
cliff.toml chore: init git-cliff config 2022-05-29 17:34:41 -08:00
crowdin.yml fix: for erroneously-translated datetime config (#1362) 2022-06-09 08:54:41 -08:00
docker-compose.dev.yml docs: docker-compose.dev.yml is currently not functional (#1300) 2022-05-27 16:17:47 -08:00
docker-compose.yml feat: extend email support for SSL/No Auth Email Support (#1235) 2022-05-21 11:15:14 -08:00
Dockerfile feat: add build id from commit hash (#1095) 2022-03-24 20:29:01 -08:00
gunicorn_conf.py feature/multi-tenancy and move caddy server (#980) 2022-02-20 14:17:51 -09:00
LICENSE Change Mealie license to AGPLv3 (#1213) 2022-05-09 13:11:26 -08:00
makefile feat: add build id from commit hash (#1095) 2022-03-24 20:29:01 -08:00
netlify.toml test-docs ci/cd 2021-08-04 10:05:53 -08:00
poetry.lock security: multiple reported CVE fixes (#1515) 2022-07-31 13:10:20 -08:00
pyproject.toml security: multiple reported CVE fixes (#1515) 2022-07-31 13:10:20 -08:00
README.md docs: fix old link 2022-06-26 19:39:35 -08:00
runtime.txt test ci/cd 2021-08-04 09:58:51 -08:00
SECURITY.md add security.md 2022-05-31 08:29:45 -08:00
template.env feat: extend email support for SSL/No Auth Email Support (#1235) 2022-05-21 11:15:14 -08:00

Contributors Forks Stargazers Issues MIT License Docker Pulls CodeFactor


Mealie

A Place for All Your Recipes
Explore the docs »
View Demo · Report Bug · Docker Hub

Product Name Screen Shot

About The Project

Mealie is a self hosted recipe manager and meal planner with a RestAPI backend and a reactive frontend application built in Vue for a pleasant user experience for the whole family. Easily add recipes into your database by providing the url and Mealie will automatically import the relevant data or add a family recipe with the UI editor. Mealie also provides an API for interactions from 3rd party applications.

Contributing

Contributions are what make the open source community such an amazing place to be learn, inspire, and create. Any contributions you make are greatly appreciated. If you're going to be working on the code-base you'll want to use the nightly documentation to ensure you get the latest information.

If you are not a coder, you can still contribute financially. financial contributions help me prioritize working on this project over others and helps me know that there is a real demand for project development.

Buy Me A Coffee

License

Distributed under the MIT License. See LICENSE for more information.

Sponsors

Huge thanks to all the sponsors of this project on Github Sponsors and Buy Me a Coffee. Without you this project would surely not be possible.

Thanks to Linode for providing Hosting for the Demo, Beta, and Documentation sites! Another big thanks to JetBrains for providing their IDEs for development.