wizardchen ab790bcbd9 fix(security): close SQL validator bypass in agent database tools ...

Harden validateNode with default-deny semantics and PG17 SQL/JSON node
recursion so dangerous functions cannot hide inside JSON_SCALAR/JSON_VALUE.
Also recurse into FROM subqueries for DuckDB data_analysis and block
read_text/read_blob and related file-access functions.

2026-07-02 11:42:11 +08:00

..

crypto_test.go

fix(crypto): fail loudly when encrypted DB fields cannot be decrypted

2026-04-30 15:17:56 +08:00

crypto.go

feat(crypto): AES-GCM at-rest for MCP and DataSource credentials with graceful key-rotation handling

2026-05-17 15:27:52 +08:00

debug.go

feat: 使用增强的任务ID生成器替换UUID

2026-01-14 17:09:19 +08:00

extraheaders_test.go

fix(embedding): support native Gemini embeddings

2026-06-02 21:37:58 +08:00

extraheaders.go

fix(embedding): support native Gemini embeddings

2026-06-02 21:37:58 +08:00

filesize.go

feat(system): consolidate system admin and settings into one Settings panel

2026-05-26 21:13:56 +08:00

fileutil.go

fix(storage): auto-detect content-type to resolve image rendering issues

2026-04-20 21:59:54 +08:00

httputil.go

feat: enhance document loading and state management in doc-content component

2026-03-02 21:21:49 +08:00

inject_test.go

fix(security): close SQL validator bypass in agent database tools

2026-07-02 11:42:11 +08:00

inject.go

fix(security): close SQL validator bypass in agent database tools

2026-07-02 11:42:11 +08:00

json.go

feat: Add DataSchema tool for retrieving schema information from CSV and Excel files

2025-12-29 20:03:51 +08:00

log_sanitize.go

feat: implement image upload and multimodal support

2026-03-12 10:32:26 +08:00

presign_test.go

feat: implement tenant validation for file access and enhance related tests

2026-05-29 13:47:32 +08:00

presign.go

feat: implement tenant validation for file access and enhance related tests

2026-05-29 13:47:32 +08:00

security_test.go

feat(retriever): add OpenSearch driver skeleton + interface stubs (PR 2a of 3)

2026-05-26 20:54:58 +08:00

security.go

feat(system): consolidate system admin and settings into one Settings panel

2026-05-26 21:13:56 +08:00

taskid.go

feat: 使用增强的任务ID生成器替换UUID

2026-01-14 17:09:19 +08:00