copilot-swe-agent[bot] 6a83d51d88 fix(automation): address code review - path traversal fix and test marker ...

- Sanitise uploaded filenames with os.path.basename() to prevent path traversal
- Change TestWebhookDispatchIntegration marker from unit to integration

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>

2026-03-10 00:01:35 +00:00

..

__init__.py

feat(automation): add Zapier and Make.com integration

2026-03-09 23:50:12 +00:00

admin_users.py

fix(auth): activate account on password reset and fix is_active check order

2026-03-08 12:07:25 +00:00

api_tokens.py

fix(security): address CodeQL clear-text logging and weak hashing alerts

2026-03-08 19:33:55 +00:00

automation.py

fix(automation): address code review - path traversal fix and test marker

2026-03-10 00:01:35 +00:00

azure.py

style: fix all flake8 linter errors across app/ directory

2026-02-08 17:42:33 +00:00

backup.py

feat(backup): extend backup and restore to PostgreSQL and MySQL/MariaDB

2026-03-08 09:56:58 +00:00

billing.py

Potential fix for code scanning alert no. 332: Information exposure through an exception

2026-03-08 18:11:38 +01:00

common.py

refactor: consolidate get_db into single module

2026-02-09 15:37:23 +00:00

database.py

fix: address code review feedback

2026-03-05 22:22:49 +00:00

diagnostic.py

feat(api): add GET /api/diagnostic/health endpoint for monitoring

2026-03-01 18:36:38 +00:00

dropbox.py

style: apply ruff auto-fix

2026-02-23 09:33:48 +00:00

duplicates.py

feat(duplicates): add duplicate document detection and management

2026-03-02 10:21:57 +00:00

files.py

refactor(pipelines): address code review - shared get_current_user_id, aria-live, deduplicate user ID logic

2026-03-07 10:39:19 +00:00

google_drive.py

style: apply ruff auto-fix

2026-02-23 09:33:48 +00:00

imap_accounts.py

feat(models): add UserIntegration model, encrypt IMAP passwords, add integrations API

2026-03-08 15:02:38 +00:00

integrations.py

fix(integrations): sanitize error messages and add SSRF protection for WebDAV test

2026-03-08 15:57:27 +00:00

local_auth.py

fix(auth): activate account on password reset and fix is_active check order

2026-03-08 12:07:25 +00:00

logs.py

feat(security): add comprehensive input validation and sanitization (#172)

2026-02-22 16:02:00 +00:00

notifications.py

feat(notifications): add per-user notification system with inbox, email, and webhook targets

2026-03-08 21:34:25 +00:00

onboarding.py

feat(notifications): admin push notifications and webhooks for user signup, plan changes, and payment issues

2026-03-07 20:15:39 +00:00

onedrive.py

style: apply ruff auto-fix

2026-02-23 09:33:48 +00:00

openai.py

fix(api): swap parameter order in test_ai_extraction to fix 500 error

2026-02-23 21:35:36 +00:00

pipelines.py

feat(ocr): add multi-language OCR support with per-pipeline language override

2026-03-08 21:47:12 +00:00

plans.py

feat(billing): expose Stripe price IDs in plan API, add Stripe Setup Wizard and sync endpoints

2026-03-08 15:14:42 +00:00

process.py

Apply Black and isort formatting to modified files

2026-02-07 15:00:18 +00:00

queue.py

refactor(queue): address code review feedback — extract constants and sync refresh interval

2026-02-27 00:47:58 +00:00

saved_searches.py

fix(security): address CodeQL clear-text logging and weak hashing alerts

2026-03-08 19:33:55 +00:00

scheduled_jobs.py

fix: code standards audit — 100% coverage, Pydantic v2 model_config, asyncio.run(), targeted edge-case tests

2026-03-09 19:00:13 +00:00

search.py

feat(search): add content-finding filters, saved searches, and text quality to Search view

2026-03-01 13:46:15 +00:00

settings.py

feat(settings): add dynamic autocomplete for AWS/Azure regions, OCR langs, and embedding models

2026-03-05 22:00:22 +00:00

shared_links.py

fix(sharing): address security review findings

2026-03-08 21:55:55 +00:00

similarity.py

fix(similarity): address code review - column-only queries, configurable batch size, WCAG touch targets

2026-03-02 13:39:10 +00:00

subscriptions.py

feat(subscriptions): add subscription change management with upgrade/downgrade scheduling

2026-03-07 20:14:12 +00:00

url_upload.py

feat(upload): adaptive 429 backoff, full Gotenberg file types, directory traversal

2026-02-26 23:24:26 +00:00

user.py

feat(ui): add user autocomplete widget for default_owner_id, user search API, and documentation

2026-03-05 21:40:41 +00:00

webhooks.py

feat(webhooks): add webhook support for external integrations

2026-03-01 20:42:57 +00:00