 Vykos
|
ca22afb10c
|
Scope auxiliary LLM endpoints by owner (#2996)
* fix(auth): scope auxiliary llm endpoints by owner
* fix(auth): scope auxiliary llm fallbacks by owner
|
2026-06-07 14:47:44 +02:00 |
|
|
Vykos
|
1fcb3f9283
|
fix(rag): forward owner through manager wrapper (#2991)
|
2026-06-07 12:56:57 +02:00 |
|
|
Vykos
|
eade393332
|
fix(personal): require document privilege for rag upload (#2990)
|
2026-06-07 12:56:53 +02:00 |
|
|
Vykos
|
09cade728c
|
fix(auth): gate api tokens from user routes (#2992)
|
2026-06-07 12:55:01 +02:00 |
|
|
Vykos
|
be933a1202
|
Harden note reminder dispatch ownership (#2999)
|
2026-06-07 12:52:27 +02:00 |
|
|
Vykos
|
f109c1e7d6
|
Scope gallery image endpoints by owner (#3001)
|
2026-06-07 12:51:21 +02:00 |
|
|
Vykos
|
cae10e623f
|
Tighten manage notes owner checks (#3002)
|
2026-06-07 12:50:10 +02:00 |
|
|
Vykos
|
ac8e6b9e06
|
Harden gallery album assignment scope (#3004)
|
2026-06-07 12:49:03 +02:00 |
|
|
Vykos
|
de33fba0e7
|
Scope document session links by owner (#3005)
|
2026-06-07 12:47:20 +02:00 |
|
|
Vykos
|
93b614a649
|
Enforce task chain owner scope (#3006)
|
2026-06-07 12:43:43 +02:00 |
|
|
Vykos
|
88043ef8d1
|
Scope model helper endpoint resolution (#3007)
|
2026-06-07 12:40:23 +02:00 |
|
|
Vykos
|
e876f8f5fa
|
Scope vision model resolution by owner (#3009)
|
2026-06-07 12:39:02 +02:00 |
|
|
Vykos
|
ec413bbcb5
|
Harden DAV outbound URL validation (#2819)
|
2026-06-05 13:22:21 +02:00 |
|
|
Vykos
|
92bb41881c
|
Constrain research handler JSON paths (#2846)
|
2026-06-05 13:20:02 +02:00 |
|
|
Vykos
|
91ccb9fabf
|
Constrain signature uploads to PNG data (#2844)
|
2026-06-05 13:17:43 +02:00 |
|
|
Vykos
|
32f6566050
|
Constrain upload paths to upload root (#2825)
|
2026-06-05 13:15:23 +02:00 |
|
|
Vykos
|
15540ae4ea
|
Constrain embedding model cache paths (#2849)
|
2026-06-05 10:46:48 +02:00 |
|
|
Vykos
|
0f1dedb7cb
|
Constrain generated-image paths to image root (#2837)
|
2026-06-05 10:33:47 +02:00 |
|
|
Vykos
|
daa52b35db
|
Harden emoji SVG proxy responses (#2842)
|
2026-06-05 10:31:58 +02:00 |
|
|
Vykos
|
484e2dc9d9
|
Constrain gallery filenames to image root (#2828)
|
2026-06-05 10:29:11 +02:00 |
|
|
Vykos
|
88b230e8ae
|
Sanitize calendar export filenames (#2840)
|
2026-06-05 10:18:09 +02:00 |
|
|
Vykos
|
cf146b396d
|
Isolate HTML popup openers (#2501)
|
2026-06-04 20:52:41 +02:00 |
|
|
Vykos
|
978d5a39bc
|
Guard image and QR DOM attributes (#2500)
|
2026-06-04 20:51:23 +02:00 |
|
|
Vykos
|
8ee14ab2aa
|
Harden chat streaming DOM sinks (#2498)
|
2026-06-04 20:49:37 +02:00 |
|
|
Vykos
|
d10b1c14fd
|
Harden email HTML URL sanitization (#2496)
|
2026-06-04 20:47:47 +02:00 |
|
|
Vykos
|
fad9b9c701
|
Harden markdown raw HTML sanitization (#2497)
|
2026-06-04 20:46:10 +02:00 |
|
|
Vykos
|
266240f3e1
|
Whitelist research source links (#2499)
|
2026-06-04 20:41:35 +02:00 |
|
|
Vykos
|
ff771033f2
|
fix(ai): scope tool model resolution by owner
* Stabilize full test collection
* Scope AI tool model resolution by owner
|
2026-06-04 00:37:28 +01:00 |
|
|
Vykos
|
ea2f1f45c6
|
fix(search): align content URL guards
* Stabilize full test collection
* Align search content URL guards
|
2026-06-04 00:34:06 +01:00 |
|
|
Vykos
|
1ad8687bfd
|
fix(uploads): bound direct upload reads
* Stabilize full test collection
* Add bounded reads for direct uploads
|
2026-06-04 00:32:50 +01:00 |
|
|
Vykos
|
0819741161
|
test: stabilize full test collection
|
2026-06-04 00:27:29 +01:00 |
|
|
Vykos
|
53ee79cdb6
|
Harden CalDAV credentials and URLs (#1310)
|
2026-06-03 02:50:02 +09:00 |
|
|
Vykos
|
94d54b5872
|
Harden session endpoint owner scope (#1308)
|
2026-06-03 02:40:22 +09:00 |
|
|
Vykos
|
2a8329aa44
|
Scope skills usage by owner (#1312)
|
2026-06-03 02:27:43 +09:00 |
|
|
Vykos
|
4007296c9f
|
Scope email account workflows by owner (#1309)
|
2026-06-03 02:21:02 +09:00 |
|
|
Vykos
|
d921ff9871
|
Keep Bitwarden unlock password off argv (#1311)
|
2026-06-03 02:13:51 +09:00 |
|