erabo/odysseus
1
0
Fork 0
mirror of https://github.com/pewdiepie-archdaemon/odysseus.git synced 2026-10-09 15:37:51 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
2512 commits 17 branches 0 tags 568 MiB
Commit graph

3 commits

Author SHA1 Message Date
Alexandre Teixeira
0d97651686 fix(security): avoid SVG title DOM reparsing 
Extract strict text-only SVG titles without reparsing model output as DOM, preserving sandboxed SVG rendering and safe accessibility labels.
 2026-10-05 22:33:25 +01:00
Alexandre Teixeira
9ee614e2ac fix(security): enforce registered endpoint authority 
Require caller-supplied model endpoints to resolve through enabled owner-visible registrations, harden session path encoding, and remove the SVG title HTML parsing sink.
 2026-10-05 22:24:15 +01:00
Alexandre Teixeira
481726acf2 fix(security): address CodeQL findings in migration candidate 2026-10-05 20:48:12 +01:00