 Vykos
|
93b614a649
|
Enforce task chain owner scope (#3006)
|
2026-06-07 12:43:43 +02:00 |
|
|
Vykos
|
88043ef8d1
|
Scope model helper endpoint resolution (#3007)
|
2026-06-07 12:40:23 +02:00 |
|
|
Vykos
|
e876f8f5fa
|
Scope vision model resolution by owner (#3009)
|
2026-06-07 12:39:02 +02:00 |
|
|
Vykos
|
ec413bbcb5
|
Harden DAV outbound URL validation (#2819)
|
2026-06-05 13:22:21 +02:00 |
|
|
Vykos
|
92bb41881c
|
Constrain research handler JSON paths (#2846)
|
2026-06-05 13:20:02 +02:00 |
|
|
Vykos
|
91ccb9fabf
|
Constrain signature uploads to PNG data (#2844)
|
2026-06-05 13:17:43 +02:00 |
|
|
Vykos
|
32f6566050
|
Constrain upload paths to upload root (#2825)
|
2026-06-05 13:15:23 +02:00 |
|
|
Vykos
|
15540ae4ea
|
Constrain embedding model cache paths (#2849)
|
2026-06-05 10:46:48 +02:00 |
|
|
Vykos
|
0f1dedb7cb
|
Constrain generated-image paths to image root (#2837)
|
2026-06-05 10:33:47 +02:00 |
|
|
Vykos
|
daa52b35db
|
Harden emoji SVG proxy responses (#2842)
|
2026-06-05 10:31:58 +02:00 |
|
|
Vykos
|
484e2dc9d9
|
Constrain gallery filenames to image root (#2828)
|
2026-06-05 10:29:11 +02:00 |
|
|
Vykos
|
88b230e8ae
|
Sanitize calendar export filenames (#2840)
|
2026-06-05 10:18:09 +02:00 |
|
|
Vykos
|
cf146b396d
|
Isolate HTML popup openers (#2501)
|
2026-06-04 20:52:41 +02:00 |
|
|
Vykos
|
978d5a39bc
|
Guard image and QR DOM attributes (#2500)
|
2026-06-04 20:51:23 +02:00 |
|
|
Vykos
|
8ee14ab2aa
|
Harden chat streaming DOM sinks (#2498)
|
2026-06-04 20:49:37 +02:00 |
|
|
Vykos
|
d10b1c14fd
|
Harden email HTML URL sanitization (#2496)
|
2026-06-04 20:47:47 +02:00 |
|
|
Vykos
|
fad9b9c701
|
Harden markdown raw HTML sanitization (#2497)
|
2026-06-04 20:46:10 +02:00 |
|
|
Vykos
|
266240f3e1
|
Whitelist research source links (#2499)
|
2026-06-04 20:41:35 +02:00 |
|
|
Vykos
|
ff771033f2
|
fix(ai): scope tool model resolution by owner
* Stabilize full test collection
* Scope AI tool model resolution by owner
|
2026-06-04 00:37:28 +01:00 |
|
|
Vykos
|
ea2f1f45c6
|
fix(search): align content URL guards
* Stabilize full test collection
* Align search content URL guards
|
2026-06-04 00:34:06 +01:00 |
|
|
Vykos
|
1ad8687bfd
|
fix(uploads): bound direct upload reads
* Stabilize full test collection
* Add bounded reads for direct uploads
|
2026-06-04 00:32:50 +01:00 |
|
|
Vykos
|
0819741161
|
test: stabilize full test collection
|
2026-06-04 00:27:29 +01:00 |
|
|
Vykos
|
53ee79cdb6
|
Harden CalDAV credentials and URLs (#1310)
|
2026-06-03 02:50:02 +09:00 |
|
|
Vykos
|
94d54b5872
|
Harden session endpoint owner scope (#1308)
|
2026-06-03 02:40:22 +09:00 |
|
|
Vykos
|
2a8329aa44
|
Scope skills usage by owner (#1312)
|
2026-06-03 02:27:43 +09:00 |
|
|
Vykos
|
4007296c9f
|
Scope email account workflows by owner (#1309)
|
2026-06-03 02:21:02 +09:00 |
|
|
Vykos
|
d921ff9871
|
Keep Bitwarden unlock password off argv (#1311)
|
2026-06-03 02:13:51 +09:00 |
|