wizardchen a17a2250ed fix(security): enforce KB access on wiki reads and related IDOR paths ...

Gate wiki GET routes and initialization config reads with KBAccessRead,
and bind async task progress endpoints to the caller tenant via task ID
parsing. Closes cross-tenant read paths reported in GHSA-ph8f-4qwx-89rr
and related initialization/progress leaks.

2026-07-02 12:06:22 +08:00

..

crypto_test.go

fix(crypto): fail loudly when encrypted DB fields cannot be decrypted

2026-04-30 15:17:56 +08:00

crypto.go

feat(crypto): AES-GCM at-rest for MCP and DataSource credentials with graceful key-rotation handling

2026-05-17 15:27:52 +08:00

debug.go

feat: 使用增强的任务ID生成器替换UUID

2026-01-14 17:09:19 +08:00

extraheaders_test.go

fix(embedding): support native Gemini embeddings

2026-06-02 21:37:58 +08:00

extraheaders.go

fix(embedding): support native Gemini embeddings

2026-06-02 21:37:58 +08:00

filesize.go

feat(system): consolidate system admin and settings into one Settings panel

2026-05-26 21:13:56 +08:00

fileutil.go

fix(storage): auto-detect content-type to resolve image rendering issues

2026-04-20 21:59:54 +08:00

httputil.go

feat: enhance document loading and state management in doc-content component

2026-03-02 21:21:49 +08:00

inject_test.go

fix(security): close SQL validator bypass in agent database tools

2026-07-02 11:42:11 +08:00

inject.go

fix(security): close SQL validator bypass in agent database tools

2026-07-02 11:42:11 +08:00

json.go

feat: Add DataSchema tool for retrieving schema information from CSV and Excel files

2025-12-29 20:03:51 +08:00

log_sanitize.go

feat: implement image upload and multimodal support

2026-03-12 10:32:26 +08:00

presign_test.go

feat: implement tenant validation for file access and enhance related tests

2026-05-29 13:47:32 +08:00

presign.go

feat: implement tenant validation for file access and enhance related tests

2026-05-29 13:47:32 +08:00

security_test.go

feat(retriever): add OpenSearch driver skeleton + interface stubs (PR 2a of 3)

2026-05-26 20:54:58 +08:00

security.go

feat(system): consolidate system admin and settings into one Settings panel

2026-05-26 21:13:56 +08:00

taskid_test.go

fix(security): enforce KB access on wiki reads and related IDOR paths

2026-07-02 12:06:22 +08:00

taskid.go

fix(security): enforce KB access on wiki reads and related IDOR paths

2026-07-02 12:06:22 +08:00