 Vykos
|
299538ea4e
|
Harden note reminder dispatch ownership (#2999)
|
2026-06-07 12:52:27 +02:00 |
|
|
Vykos
|
67aeea4f8b
|
Scope gallery image endpoints by owner (#3001)
|
2026-06-07 12:51:21 +02:00 |
|
|
Vykos
|
f2a79aaf5c
|
Tighten manage notes owner checks (#3002)
|
2026-06-07 12:50:10 +02:00 |
|
|
Vykos
|
a6490ffb1b
|
Harden gallery album assignment scope (#3004)
|
2026-06-07 12:49:03 +02:00 |
|
|
Vykos
|
06d28e23ac
|
Scope document session links by owner (#3005)
|
2026-06-07 12:47:20 +02:00 |
|
|
Vykos
|
7b4e6c4c1b
|
Enforce task chain owner scope (#3006)
|
2026-06-07 12:43:43 +02:00 |
|
|
Vykos
|
3cff06781e
|
Scope model helper endpoint resolution (#3007)
|
2026-06-07 12:40:23 +02:00 |
|
|
Vykos
|
ff4508d396
|
Scope vision model resolution by owner (#3009)
|
2026-06-07 12:39:02 +02:00 |
|
|
Vykos
|
370ae5d451
|
Harden DAV outbound URL validation (#2819)
|
2026-06-05 13:22:21 +02:00 |
|
|
Vykos
|
6d64055328
|
Constrain research handler JSON paths (#2846)
|
2026-06-05 13:20:02 +02:00 |
|
|
Vykos
|
0b0d747f1c
|
Constrain signature uploads to PNG data (#2844)
|
2026-06-05 13:17:43 +02:00 |
|
|
Vykos
|
688194113b
|
Constrain upload paths to upload root (#2825)
|
2026-06-05 13:15:23 +02:00 |
|
|
Vykos
|
b19e5693af
|
Constrain embedding model cache paths (#2849)
|
2026-06-05 10:46:48 +02:00 |
|
|
Vykos
|
11ba46505b
|
Constrain generated-image paths to image root (#2837)
|
2026-06-05 10:33:47 +02:00 |
|
|
Vykos
|
d4d168f972
|
Harden emoji SVG proxy responses (#2842)
|
2026-06-05 10:31:58 +02:00 |
|
|
Vykos
|
194985b5e1
|
Constrain gallery filenames to image root (#2828)
|
2026-06-05 10:29:11 +02:00 |
|
|
Vykos
|
2cae5a681d
|
Sanitize calendar export filenames (#2840)
|
2026-06-05 10:18:09 +02:00 |
|
|
Vykos
|
9964f1382f
|
Isolate HTML popup openers (#2501)
|
2026-06-04 20:52:41 +02:00 |
|
|
Vykos
|
ca8ca38a32
|
Guard image and QR DOM attributes (#2500)
|
2026-06-04 20:51:23 +02:00 |
|
|
Vykos
|
b59bbe80ce
|
Harden chat streaming DOM sinks (#2498)
|
2026-06-04 20:49:37 +02:00 |
|
|
Vykos
|
e113c10d01
|
Harden email HTML URL sanitization (#2496)
|
2026-06-04 20:47:47 +02:00 |
|
|
Vykos
|
01c99c3990
|
Harden markdown raw HTML sanitization (#2497)
|
2026-06-04 20:46:10 +02:00 |
|
|
Vykos
|
3ae89599f3
|
Whitelist research source links (#2499)
|
2026-06-04 20:41:35 +02:00 |
|
|
Vykos
|
5f58f9a45f
|
fix(ai): scope tool model resolution by owner
* Stabilize full test collection
* Scope AI tool model resolution by owner
|
2026-06-04 00:37:28 +01:00 |
|
|
Vykos
|
aaef6b1c49
|
fix(search): align content URL guards
* Stabilize full test collection
* Align search content URL guards
|
2026-06-04 00:34:06 +01:00 |
|
|
Vykos
|
193dc2f085
|
fix(uploads): bound direct upload reads
* Stabilize full test collection
* Add bounded reads for direct uploads
|
2026-06-04 00:32:50 +01:00 |
|
|
Vykos
|
5869106089
|
test: stabilize full test collection
|
2026-06-04 00:27:29 +01:00 |
|
|
Vykos
|
b2291fad49
|
Harden CalDAV credentials and URLs (#1310)
|
2026-06-03 02:50:02 +09:00 |
|
|
Vykos
|
4771d80eb2
|
Harden session endpoint owner scope (#1308)
|
2026-06-03 02:40:22 +09:00 |
|
|
Vykos
|
5ee30cc144
|
Scope skills usage by owner (#1312)
|
2026-06-03 02:27:43 +09:00 |
|
|
Vykos
|
1adf21a7e5
|
Scope email account workflows by owner (#1309)
|
2026-06-03 02:21:02 +09:00 |
|
|
Vykos
|
e73545f64f
|
Keep Bitwarden unlock password off argv (#1311)
|
2026-06-03 02:13:51 +09:00 |
|