Christian Krakau-Louis 88368f7f76 Merge pull request #809 from christianlouis/security/fix-sql-injection-db-migrate-320708476140781345 ...

🔒 Fix SQL Injection Vulnerability in Database Migration Preview

2026-03-23 17:16:07 +01:00

..

config_validator

merge: resolve conflicts with main branch (keep both SharePoint + iCloud integrations)

2026-03-16 22:25:51 +00:00

__init__.py

feat(storage): implement immutable original/processed file storage and collision handling

2026-02-11 20:10:19 +00:00

ai_provider.py

feat(ai): handle temperature incompatibility for gpt-5 and o-series models, add model picker UI

2026-02-23 22:12:08 +00:00

allowed_types.py

🛡️ Sentinel: [HIGH] Fix Server-Side Request Forgery in IMAP connections

2026-03-23 14:45:22 +00:00

audit_service.py

fix: merge main branch and renumber migration 027→037

2026-03-16 22:40:15 +00:00

cache.py

fix: add type: ignore for redis.scan() mypy false positive in cache.py

2026-03-01 15:22:50 +00:00

compliance_service.py

fix: merge main branch and renumber migration 027→037

2026-03-16 22:40:15 +00:00

config_loader.py

fix(config): decrypt sensitive settings when loading from database

2026-02-23 12:54:34 +00:00

db_migrate.py

🔒 Fix potential SQL injection in database migration preview

2026-03-23 14:06:18 +00:00

db_wizard.py

feat(database): integrate wizard into settings page, improve accessibility and test coverage

2026-03-06 10:02:04 +00:00

encryption.py

feat: add strict mypy type-checking for app/utils/ module

2026-02-14 00:27:52 +00:00

env_utils.py

fix: merge main branch and renumber migration 027→037

2026-03-16 22:40:15 +00:00

file_operations.py

🛡️ Sentinel: [CRITICAL] Fix path traversal vulnerability in file utilities

2026-03-23 15:53:18 +00:00

file_queries.py

fix(status): prevent false Completed status when mandatory pipeline steps have not run

2026-02-27 00:51:14 +00:00

file_splitting.py

refactor: consolidate linting tools into Ruff

2026-02-13 09:10:52 +00:00

file_status.py

perf(db): add indexes on query-hot columns and Redis caching layer

2026-03-01 14:38:28 +00:00

filename_utils.py

fix: merge main branch and renumber migration 027→037

2026-03-16 22:40:15 +00:00

i18n.py

fix: merge main branch and renumber migration 027→037

2026-03-16 22:40:15 +00:00

input_validation.py

fix(api): return 200 with value=None for unknown setting keys in GET endpoint

2026-02-22 20:04:57 +00:00

local_auth.py

feat(auth): add comprehensive debug logging for local login failures

2026-03-08 12:48:38 +00:00

logging.py

fix: include exc_info in log_task_progress debug message

2026-02-17 11:41:56 +00:00

meilisearch_client.py

feat(search): add content-finding filters, saved searches, and text quality to Search view

2026-03-01 13:46:15 +00:00

migrate_logs_to_steps.py

refactor: consolidate linting tools into Ruff

2026-02-13 09:10:52 +00:00

network.py

🛡️ Sentinel: [HIGH] Fix Server-Side Request Forgery in IMAP connections

2026-03-23 14:45:22 +00:00

notification.py

feat(notifications): admin push notifications and webhooks for user signup, plan changes, and payment issues

2026-03-07 20:15:39 +00:00

oauth_helper.py

style: fix all flake8 linter errors across app/ directory

2026-02-08 17:42:33 +00:00

ocr_language_manager.py

fix(ocr): ensure Tesseract language data for embed_text_layer regardless of active OCR provider

2026-02-24 18:02:19 +00:00

ocr_provider.py

feat(ocr): add multi-language OCR support with per-pipeline language override

2026-03-08 21:47:12 +00:00

push_notification.py

fix: merge main branch and renumber migration 027→037

2026-03-16 22:40:15 +00:00

routing_engine.py

fix: merge main branch and renumber migration 027→037

2026-03-16 22:40:15 +00:00

sentry.py

feat(observability): add Sentry error and performance monitoring integration

2026-03-08 21:09:17 +00:00

session_manager.py

fix: merge main branch and renumber migration 037→040

2026-03-20 23:54:04 +00:00

settings_service.py

🛡️ Sentinel: [HIGH] Fix Server-Side Request Forgery in IMAP connections

2026-03-23 14:45:22 +00:00

settings_sync.py

🛡️ Sentinel: [HIGH] Fix Server-Side Request Forgery in IMAP connections

2026-03-23 14:45:22 +00:00

setup_wizard.py

feat: update all OpenAI/ChatGPT refs + settings dropdown for fixed-value fields

2026-02-23 20:06:57 +00:00

similarity.py

fix(similarity): address code review - column-only queries, configurable batch size, WCAG touch targets

2026-03-02 13:39:10 +00:00

step_manager.py

fix(similarity): truncate text to fit embedding model context window, fix step tracking

2026-03-02 13:27:34 +00:00

step_timeout.py

fix: apply Phase 1-2 correctness and constant extraction from PR #273

2026-02-13 11:25:30 +00:00

subscription.py

chore: merge main into branch, resolve conflict in models.py

2026-03-07 20:53:42 +00:00

suggestion_providers.py

fix: address code review — use modern type hints and Callable annotation

2026-03-05 22:03:30 +00:00

system_reset.py

fix: merge main branch and renumber migration 037→040

2026-03-20 23:54:04 +00:00

text_quality.py

feat(ocr): fine-tune OCR quality criteria with stricter threshold and head-to-head comparison

2026-02-25 13:03:21 +00:00

user_notification.py

fix: merge main branch and renumber migration 027→037

2026-03-16 22:40:15 +00:00

user_scope.py

🛡️ Sentinel: [HIGH] Fix Server-Side Request Forgery in IMAP connections

2026-03-23 14:45:22 +00:00

webhook.py

🛡️ Sentinel: [HIGH] Fix Server-Side Request Forgery in IMAP connections

2026-03-23 14:45:22 +00:00