jpmschweitzer/odysseus
1
0
Fork 0
mirror of https://github.com/pewdiepie-archdaemon/odysseus.git synced 2026-10-09 16:32:21 +02:00
Code Issues Packages Projects Releases Wiki Activity
2,529 Commits 17 Branches 0 Tags
430c2718aa96e800539a0f409a3f6878c8ad2ecd
Commit Graph
3 Commits
Author SHA1 Message Date
Alexandre Teixeira 0d97651686 fix(security): avoid SVG title DOM reparsing 
Extract strict text-only SVG titles without reparsing model output as DOM, preserving sandboxed SVG rendering and safe accessibility labels.
 2026-10-05 22:33:25 +01:00
Alexandre Teixeira 9ee614e2ac fix(security): enforce registered endpoint authority 
Require caller-supplied model endpoints to resolve through enabled owner-visible registrations, harden session path encoding, and remove the SVG title HTML parsing sink.
 2026-10-05 22:24:15 +01:00
Alexandre Teixeira 481726acf2 fix(security): address CodeQL findings in migration candidate 2026-10-05 20:48:12 +01:00