Peter Steinberger
|
f36d8c09f1
|
feat(zalouser): audit mutable group allowlists
|
2026-03-13 01:44:42 +00:00 |
|
Josh Avant
|
0e4245063f
|
CLI: make read-only SecretRef status flows degrade safely (#37023)
* CLI: add read-only SecretRef inspection
* CLI: fix read-only SecretRef status regressions
* CLI: preserve read-only SecretRef status fallbacks
* Docs: document read-only channel inspection hook
* CLI: preserve audit coverage for read-only SecretRefs
* CLI: fix read-only status account selection
* CLI: fix targeted gateway fallback analysis
* CLI: fix Slack HTTP read-only inspection
* CLI: align audit credential status checks
* CLI: restore Telegram read-only fallback semantics
|
2026-03-05 23:07:13 -06:00 |
|
Ho Lim
|
da0e245db6
|
fix(security): avoid prototype-chain account path checks (#34982)
Merged via squash.
Prepared head SHA: f89cc6a649
Co-authored-by: HOYALIM <166576253+HOYALIM@users.noreply.github.com>
Co-authored-by: dvrshil <81693876+dvrshil@users.noreply.github.com>
Reviewed-by: @dvrshil
|
2026-03-04 17:38:09 -08:00 |
|
Peter Steinberger
|
1a0036283d
|
refactor(security): dedupe telegram allowlist validation loops
|
2026-03-03 02:53:13 +00:00 |
|
Peter Steinberger
|
bce643a0bd
|
refactor(security): enforce account-scoped pairing APIs
|
2026-02-26 21:57:52 +01:00 |
|
Peter Steinberger
|
161d9841dc
|
refactor(security): unify dangerous name matching handling
|
2026-02-24 01:33:08 +00:00 |
|
Peter Steinberger
|
cfa44ea6b4
|
fix(security): make allowFrom id-only by default with dangerous name opt-in (#24907)
* fix(channels): default allowFrom to id-only; add dangerous name opt-in
* docs(security): align channel allowFrom docs with id-only default
|
2026-02-24 01:01:51 +00:00 |
|
Peter Steinberger
|
f97c45c5b5
|
fix(security): warn on Discord name-based allowlists in audit
|
2026-02-21 19:45:17 +01:00 |
|
Peter Steinberger
|
5c5c032f42
|
refactor(security): share DM allowlist state resolver
|
2026-02-18 23:58:11 +00:00 |
|
Peter Steinberger
|
89a0b95af4
|
refactor(security): reuse shared allowlist normalization
|
2026-02-18 23:48:32 +00:00 |
|
Peter Steinberger
|
b8b43175c5
|
style: align formatting with oxfmt 0.33
|
2026-02-18 01:34:35 +00:00 |
|
Peter Steinberger
|
31f9be126c
|
style: run oxfmt and fix gate failures
|
2026-02-18 01:29:02 +00:00 |
|
cpojer
|
d0cb8c19b2
|
chore: wtf.
|
2026-02-17 13:36:48 +09:00 |
|
Sebastian
|
ed11e93cf2
|
chore(format)
|
2026-02-16 23:20:16 -05:00 |
|
cpojer
|
90ef2d6bdf
|
chore: Update formatting.
|
2026-02-17 09:18:40 +09:00 |
|
Peter Steinberger
|
7773c5410b
|
refactor(telegram): share allowFrom normalization
|
2026-02-15 18:17:05 +00:00 |
|
Peter Steinberger
|
cf04208cb9
|
fix(allowlist): canonicalize Slack/Discord allowFrom
|
2026-02-15 03:46:16 +01:00 |
|
Peter Steinberger
|
e3b432e481
|
fix(telegram): require sender ids for allowlist auth
|
2026-02-14 16:09:00 +01:00 |
|
Peter Steinberger
|
23555de5d9
|
refactor(security): extract channel audit checks
|
2026-02-13 19:08:37 +00:00 |
|