wizardchen def92bb74f fix(router): restrict KB-scoped file proxy to exports/ paths ...

Borrowers with shared-KB read access could previously request any
owner-tenant storage path via /knowledge-bases/:id/files. Limit the
proxy to exports/ embedded images; raw knowledge uploads continue to
use /knowledge/:id/download.

2026-07-13 12:13:58 +08:00

..

crypto_test.go

fix(crypto): fail loudly when encrypted DB fields cannot be decrypted

2026-04-30 15:17:56 +08:00

crypto.go

feat(crypto): AES-GCM at-rest for MCP and DataSource credentials with graceful key-rotation handling

2026-05-17 15:27:52 +08:00

debug.go

feat: 使用增强的任务ID生成器替换UUID

2026-01-14 17:09:19 +08:00

extraheaders_test.go

fix(embedding): support native Gemini embeddings

2026-06-02 21:37:58 +08:00

extraheaders.go

fix(embedding): support native Gemini embeddings

2026-06-02 21:37:58 +08:00

filesize.go

feat(system): consolidate system admin and settings into one Settings panel

2026-05-26 21:13:56 +08:00

fileutil.go

fix(security): harden outbound requests and file previews

2026-07-02 19:15:46 +08:00

httputil.go

feat: enhance document loading and state management in doc-content component

2026-03-02 21:21:49 +08:00

inject_test.go

fix(security): close SQL validator bypass in agent database tools

2026-07-02 11:42:11 +08:00

inject.go

fix(security): close SQL validator bypass in agent database tools

2026-07-02 11:42:11 +08:00

json.go

feat: Add DataSchema tool for retrieving schema information from CSV and Excel files

2025-12-29 20:03:51 +08:00

log_sanitize.go

feat: implement image upload and multimodal support

2026-03-12 10:32:26 +08:00

oidc_state_test.go

fix(security): close six open GHSA findings from security triage

2026-07-02 15:03:53 +08:00

oidc_state.go

fix(security): close six open GHSA findings from security triage

2026-07-02 15:03:53 +08:00

presign_test.go

fix(router): restrict KB-scoped file proxy to exports/ paths

2026-07-13 12:13:58 +08:00

presign.go

fix(router): restrict KB-scoped file proxy to exports/ paths

2026-07-13 12:13:58 +08:00

security_redirect_test.go

fix(security): close six open GHSA findings from security triage

2026-07-02 15:03:53 +08:00

security_test.go

feat(retriever): add OpenSearch driver skeleton + interface stubs (PR 2a of 3)

2026-05-26 20:54:58 +08:00

security.go

fix(security): close six open GHSA findings from security triage

2026-07-02 15:03:53 +08:00

taskid_test.go

fix(security): enforce KB access on wiki reads and related IDOR paths

2026-07-02 12:06:22 +08:00

taskid.go

fix(security): enforce KB access on wiki reads and related IDOR paths

2026-07-02 12:06:22 +08:00