Matthew Meszaros a4b42d8ea1 Merge pull request #911 from warmbly/devin/1791603700-main-security ...

feat: resolve actionable security findings in parsing, Kafka events and dependency trees

2026-10-10 06:22:28 +00:00

..

api

feat: keep campaign mailboxes sending around durable recovery holds and reconcile uncertain outcomes

2026-10-10 04:20:12 +00:00

development

Merge pull request #911 from warmbly/devin/1791603700-main-security

2026-10-10 06:22:28 +00:00

guides

feat: keep campaign mailboxes sending around durable recovery holds and reconcile uncertain outcomes

2026-10-10 04:20:12 +00:00

learn

feat: bound user-authored templates (range only over data fields, two-deep nesting, no template calls, 1 MiB output, capped compile cache) for campaign and automation rendering, accept only single addresses and single Message-IDs for to/cc/bcc/in_reply_to on every send path with invalid_recipient and invalid_message_id, refuse multi-line headers in the Gmail, Graph and SMTP writers, always apply a no-script CSP and drop non-http(s)/mailto/tel link targets in email previews, treat only single-slash paths as internal Remie links, accept integration OAuth callbacks only from the API origin, and follow only http(s) form redirects and app install links

2026-10-04 03:02:37 -07:00

meta.json

Publish development docs to docs.warmbly.com

2026-06-28 13:25:08 +02:00