5 Commits

Include renames

Author	SHA1	Message	Date
Alexandre Teixeira	0784cd2fed	fix(review): harden scholarly redirects, editor draft limits, and threat model ... - Enforce outbound URL policy on all hops via bounded manual redirects in scholarly lookups - Guard declared Content-Length in EditorDraftRoute before request body parsing - Keep scholarly lookup timeouts and budgets as internal constants rather than surface env vars - Narrow TUI threat-model description around demonstrable host shell bridge behavior - Add behavioral regression tests for redirect security and pre-parsing body size guards	2026-09-23 12:53:06 +01:00
Léo	3412c4212e	fix(editor-drafts): refuse oversized drafts before parsing the body ... The 256 MiB ceiling was only enforced inside _dump_payload, which runs after FastAPI has parsed the request and after json.dumps has re-serialised it. By that point the payload has been materialised several times over, so the limit rejected an allocation it had already paid for. Check Content-Length first, on both write routes. A request that omits or lies about the header still reaches the exact byte count, which remains authoritative.	2026-09-23 11:09:48 +02:00
pewdiepie-archdaemon	84aa9a91de	Squash Odysseus development history	2026-09-11 06:04:19 +00:00
red person	bb5caf2d42	Ignore invalid editor draft payloads (#1533)	2026-06-03 14:07:03 +09:00
pewdiepie-archdaemon	e5c99a5eee	Odysseus v1.0	2026-05-31 23:58:26 +09:00