pewdiepie-archdaemon
d8a2059df8
Merge verified Odysseus fixes
CodeQL / Analyze (actions) (push) Has been cancelled
CodeQL / Analyze (javascript-typescript) (push) Has been cancelled
CodeQL / Analyze (python) (push) Has been cancelled
ci / docker publish / build (amd64) (push) Has been cancelled
ci / docker publish / build (arm64) (push) Has been cancelled
ci / docker publish / merge manifest + tag (push) Has been cancelled
2026-07-23 14:49:02 +00:00
pewdiepie-archdaemon
1933201117
Merge remote-tracking branch 'origin/dev'
...
# Conflicts:
# routes/document_routes.py
2026-07-01 10:11:22 +00:00
Alexandre Teixeira
4c7db7c216
fix(security): harden gallery endpoint URL checks ( #4981 )
...
Replace substring OpenAI endpoint detection with exact parsed-host matching.
Route gallery image endpoint construction through a constant path allowlist.
Remove client-visible exception and upstream response body leaks from gallery image flows while preserving diagnostics in server logs.
Add focused regression tests for OpenAI host matching, checked endpoint joining, harmonize SSRF hardening, and sanitized client errors.
2026-06-30 19:16:34 +02:00
pewdiepie-archdaemon
fada157099
Restore chat thumbnails and gallery OCR captions
2026-06-29 01:19:50 +00:00
Tal.Yuan
3441061345
refactor(routes): move gallery domain into routes/gallery subpackage ( #4903 )
...
Move the gallery route domain into routes/gallery/ while preserving backward-compatible legacy import shims.
- app imports the canonical gallery route module
- canonical gallery route code imports canonical gallery helpers
- legacy gallery route/helper paths remain compatibility aliases
- add shim regression coverage for module identity and monkeypatch behavior
- repoint gallery source-introspection tests to the canonical paths
No intended behavior change.
2026-06-28 10:40:34 +01:00
