Timothy Jaeryang Baek 8b35ce924b refac

2026-06-17 00:15:04 +02:00

..

access_control

Gate scheduled automations and fail closed on per-model access for non-user roles (#26047)

2026-06-16 22:45:27 +02:00

images

…

mcp

chore: format

2026-06-01 13:56:55 -07:00

telemetry

…

actions.py

…

anthropic.py

refac

2026-06-16 23:41:17 +02:00

asgi_middleware.py

…

audit.py

…

auth.py

refac

2026-06-17 00:05:45 +02:00

automations.py

Gate scheduled automations and fail closed on per-model access for non-user roles (#26047)

2026-06-16 22:45:27 +02:00

calendar.py

…

channels.py

…

chat.py

Enforce per-model access on arena fallback before bypass_filter dispatch (#26046)

2026-06-16 22:45:42 +02:00

code_interpreter.py

…

embeddings.py

…

files.py

Route user-supplied image-URL fetches through an SSRF-safe session (DNS rebinding, CWE-918) (#25960)

2026-06-16 23:36:53 +02:00

filter.py

…

groups.py

…

headers.py

refac

2026-06-13 02:13:51 +01:00

logger.py

chore: format

2026-06-01 13:56:55 -07:00

middleware.py

refac

2026-06-16 23:48:01 +02:00

misc.py

Match WEB_FETCH_FILTER_LIST on hostnames with label boundaries, not URL suffix (CWE-693) (#25949)

2026-06-16 23:53:08 +02:00

models.py

refac

2026-06-16 23:24:27 +02:00

oauth.py

fix(oauth): use Protected Resource Metadata scopes in MCP DCR flow (#25958)

2026-06-16 23:53:38 +02:00

payload.py

…

pdf_generator.py

…

plugin.py

…

rate_limit.py

…

redis.py

chore: format

2026-06-01 13:56:55 -07:00

response.py

…

sanitize.py

…

security_headers.py

…

session_pool.py

…

task.py

refac

2026-06-17 00:15:04 +02:00

tools.py

chore: format

2026-06-01 13:56:55 -07:00

validate.py

chore: format

2026-06-01 13:56:55 -07:00

webhook.py

fix: block private-IP webhook URLs to close SSRF on caller-controlled URL (#24587)

2026-06-01 14:15:51 -07:00