CI Test
56e06de545
fix(security): harden browser security boundaries
...
Reject unsafe metric ledger keys, keep email HTML inspection inert, and construct gallery thumbnails structurally. Add adversarial browser regressions for the remaining CodeQL security boundaries.
2026-10-05 23:48:14 +01:00
CI Test
25a32e49a0
fix(security): avoid SVG title DOM reparsing
...
Extract strict text-only SVG titles without reparsing model output as DOM, preserving sandboxed SVG rendering and safe accessibility labels.
2026-10-05 22:33:25 +01:00
CI Test
7fc7f7427f
fix(security): enforce registered endpoint authority
...
Require caller-supplied model endpoints to resolve through enabled owner-visible registrations, harden session path encoding, and remove the SVG title HTML parsing sink.
2026-10-05 22:24:15 +01:00
CI Test
059ac58cff
fix(security): address CodeQL findings in migration candidate
2026-10-05 20:48:12 +01:00
CI Test
4b140043bb
test(ci): stabilize public CI shard validation
2026-10-05 19:21:50 +01:00
CI Test