Commit Graph
3 Commits
Author SHA1 Message Date
CI Test 25a32e49a0 fix(security): avoid SVG title DOM reparsing
Extract strict text-only SVG titles without reparsing model output as DOM, preserving sandboxed SVG rendering and safe accessibility labels.
2026-10-05 22:33:25 +01:00
CI Test 7fc7f7427f fix(security): enforce registered endpoint authority
Require caller-supplied model endpoints to resolve through enabled owner-visible registrations, harden session path encoding, and remove the SVG title HTML parsing sink.
2026-10-05 22:24:15 +01:00
CI Test 059ac58cff fix(security): address CodeQL findings in migration candidate 2026-10-05 20:48:12 +01:00