1a195a96bd
fix: merge main, address code review feedback for security fix PR #816
...
- Merge origin/main into branch (resolve conflict in integrations_dashboard.html)
- Add defensive JSON parsing with try/except for integration.config
- Wrap tester() call in try/except to prevent 500 errors from bad config
- Add i18n key integrations.connection_test_failed_fallback in en.json
- Reference i18n key in template JS fallback message
- Update SECURITY_AUDIT.md: add fix date (2026-03-23), update doc date
- Remove accidental revert.sh file
- Fix missing MagicMock/patch imports in test file
- Add tests for invalid JSON config and tester exception error paths
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
Agent-Logs-Url: https://github.com/christianlouis/DocuElevate/sessions/daebb70e-059a-4601-8864-88eef49f99cf
2026-03-23 16:21:09 +00:00
b7a195d3bc
style: apply ruff auto-fix
...
- Auto-formatted code with ruff format
- Applied ruff linting fixes with --fix
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-03-15 04:10:28 +00:00
8079db7893
🛡️ Sentinel: [HIGH] Fix SSRF in WebDAV connection test
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-03-15 04:10:11 +00:00
a05690bd5f
feat(upload): adaptive 429 backoff, full Gotenberg file types, directory traversal
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-26 23:24:26 +00:00
43bc58770d
refactor: consolidate linting tools into Ruff
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-13 09:10:52 +00:00
dff32e08e1
test: add comprehensive tests for critical untested files and fix deprecated warnings
...
- Add tests for migrate_logs_to_steps.py, upload_to_paperless.py, dropbox API,
upload_to_dropbox.py, upload_to_nextcloud.py, upload_to_onedrive.py,
upload_with_rclone.py, and config_validator.py
- Fix PydanticDeprecatedSince20: @validator → @field_validator in config.py, url_upload.py
- Fix PydanticDeprecatedSince20: class Config → model_config = SettingsConfigDict
- Fix PydanticDeprecatedSince211: filter Pydantic internals in settings_display.py
- Fix MovedIn20Warning: use sqlalchemy.orm.declarative_base instead of ext.declarative
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-12 17:32:17 +00:00
ff9a3ff49f
style: fix code formatting with black, isort, and flake8
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-12 03:21:41 +00:00
9cd7a80cbc
fix(api): add Request parameter to process_url endpoint for session access
...
The @require_login decorator expects a Starlette Request as the first
parameter to access request.session, but process_url only had a
URLUploadRequest Pydantic model parameter. This caused an
AttributeError: 'URLUploadRequest' object has no attribute 'session'
when POST /api/process-url was called.
Fix: Add `request: Request` as the first parameter and rename the
Pydantic model parameter from `request` to `url_request`.
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-11 14:25:57 +00:00
47a1de953d
refactor: address code review comments
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-11 13:39:35 +00:00
245e298991
feat: add URL-based file upload with SSRF protection
...
Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com >
2026-02-11 13:36:23 +00:00
copilot-swe-agent[bot]