Alexandre Teixeira de8f151632 fix(security): harden trace teardown and gallery error responses ...

- CodeQL #1202 (tests/e2e/teardown.js): replace execSync shell execution with
  execFileSync, passing python executable and sanitizer arguments separately with
  shell: false. Preserve ODYSSEUS_TEST_PYTHON support, timeout handling, and
  fail-closed deletion.
- CodeQL #1203 (routes/gallery/gallery_routes.py): prevent exception information
  exposure in /api/image/edit-progress by returning a generic rejection response
  without leaking internal hostnames, IPs, resolver errors, or credentials.
- Add regression tests covering paths with spaces, metacharacters, synthetic command
  substitutions, process failure modes, fail-closed artifact purge, and SSRF
  rejection confidentiality.

2026-10-28 21:10:12 +00:00

..

__init__.py

refactor(routes): move gallery domain into routes/gallery subpackage (#4903)

2026-06-28 10:40:34 +01:00

gallery_helpers.py

Restore chat thumbnails and gallery OCR captions

2026-06-29 01:19:50 +00:00

gallery_routes.py

fix(security): harden trace teardown and gallery error responses

2026-10-28 21:10:12 +00:00