Commit Graph
2 Commits
Author SHA1 Message Date
Duarte AntunesandCursor 448401a0fc Harden PDF document markers against cross-owner upload access (#445)
Route PDF lookups through UploadHandler.resolve_upload, reject poisoned pdf_source markers on document create/update, and add regression tests.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-01 22:38:14 +09:00
Duarte Antunes e77d87fa80 Enforce owner checks for upload attachments 2026-06-01 16:47:48 +09:00