Ruben FiszelandClaude Opus 5.5 7593597617 fix: validate app and trigger paths, refuse traversal in workspace export (#11311) ...

* fix: enforce proper_id paths on apps and triggers, refuse traversal in export

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* fix: skip proper_id on tables already holding non-conforming paths

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* test: pin archive entry path traversal guard

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* fix: refuse windows-normalized traversal in export, check raw app path early

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* fix: only treat a colon in the first archive segment as a drive prefix

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* test: accept a colon past the first archive segment

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* revert: drop proper_id migration, keep path validation in the API

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* fix: validate paths in bulk http trigger creation

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-09-23 15:50:32 +02:00

..

src

fix: validate app and trigger paths, refuse traversal in workspace export (#11311)

2026-09-23 15:50:32 +02:00

tests

fix: force HTTP router rebuild on trigger-change notification (#10849)

2026-08-26 08:23:25 +02:00

Cargo.toml

fix: add timestamp validation to webhook signature verification (#8596)

2026-03-29 12:19:59 +00:00