starred/windmill

mirror of https://github.com/windmill-labs/windmill.git synced 2026-10-28 16:02:47 +00:00

Files

T

History

tristantrandClaude Opus 4.8 31c2dffc8e fix(hub-publish): validate project slug before interpolating into Hub path

slug/project_slug are caller-controlled and were interpolated straight into
the Hub request path; a crafted value (e.g. ../../admin) could reach an
unintended Hub endpoint after URL normalization. Validate against the
frontend charset (lowercase alphanumerics + hyphens, 3-50 chars) in the four
handlers that put the slug in the path.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-08 17:56:05 +02:00

..

fix(hub-publish): validate project slug before interpolating into Hub path

2026-06-08 17:56:05 +02:00

banned_domains.txt

increase banned_domains list

2022-12-14 10:24:18 +01:00

build_openapi.sh

add scalar at openapi2.html

2024-04-08 01:42:43 +02:00

build.rs

refactor: extract object store into dedicated crate with filesystem backend (#7996 )

2026-02-18 12:24:45 +00:00

Cargo.toml

refactor: move bedrock proxy handling to windmill-ai (#9309 )

2026-06-08 11:35:45 +02:00

openapi-deref.json

feat(service-accounts): allow choosing role at creation time (#9307 )

2026-06-08 11:35:45 +02:00

openapi-deref.yaml

feat(service-accounts): allow choosing role at creation time (#9307 )

2026-06-08 11:35:45 +02:00

openapi.yaml

chore(main): release 1.710.1 (#9327 )

2026-06-08 11:35:46 +02:00

README.md

restructure the entire backend layout using workspaces (#815 )

2022-10-29 11:58:06 +02:00

README.md

Windmill API

The API server, exposing functionality to other components and the frontend

This crate exposes both a library as well as a binary target.