jpmschweitzer/odysseus
1
0
Fork 0
mirror of https://github.com/pewdiepie-archdaemon/odysseus.git synced 2026-10-30 01:32:25 +01:00
Code Issues Packages Projects Releases Wiki Activity

merge(dev): reconcile photo editor security and upstream changes

Browse Source 
- Reconcile conflict resolution in routes/editor_agent_routes.py and src/editor_agent_model.py
- Enforce strict server-authorized endpoint resolution and reject client URL overrides
- Enforce bearer-token privilege separation: delegated API tokens are capped at non-admin scope per src/tool_security.py and cannot inspect private base URLs or probe metadata
- Preserve chat-scope authorization, missing-session 401 rejection, and owner-scoped browser bridge/SSE queues
- Preserve administrator-disabled-tool denylist enforcement introduced by PR #6357
- Fix mobile toolbar flyout hit-testing and stacking context trapping on viewports <= 700px via scoped elevation and mask suppression
- Stabilize project recovery test fixture by awaiting document draft quiescence prior to baseline capture
This commit is contained in:
Alexandre Teixeira
2026-10-28 19:30:08 +00:00
parent c237a1cb9c 57a1859f08
commit 2e1c2a343a
94 changed files with 12199 additions and 477 deletions
Download Patch File Download Diff File Expand all files Collapse all files
static/css/13-image-editor.css
+7
View File
@@ -8635,6 +8635,13 @@ body.ge-editor-open .toast.toast-transform-hint {
position: relative;
align-items: stretch;
}
.ge-toolbar-wrap.ge-flyout-open {
z-index: 250;
}
.ge-toolbar.ge-flyout-open .ge-toolbar-scroll {
-webkit-mask-image: none !important;
mask-image: none !important;
}
.ge-toolbar-wrap > .ge-toolbar { flex: 1 1 auto; min-width: 0; }
.ge-tool-more {
display: none;