Chris CoutinhoandClaude Opus 4.6 777a09c806 fix: address PR review — XSS escape, asyncio→anyio, URL rewrite dedup ...

- Escape HTML in _render_error to prevent XSS from exception messages
- Replace asyncio.create_task/sleep with anyio task group and sleep,
  tying poll task lifetime to the app lifespan for proper cleanup
- Extract rewrite_url_origin() utility to fix duplicated URL rewriting
  logic and replace urlparse._replace with stable urlunparse API
- Add warning log for insecure HTTP redirect URIs
- Add unit tests for validation, XSS escaping, route handlers, and
  URL rewriting (16 new tests in test_provision_routes.py)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-30 08:51:41 +02:00

..

api

fix: address review feedback — security, caching, CI 429 retry

2026-03-02 17:22:23 +01:00

client

fix: resolve all type checking errors (8 errors fixed)

2025-12-08 01:09:02 +01:00

providers

feat: Add OpenAI provider support for embeddings and generation

2025-11-23 00:33:32 +01:00

search

feat: add configurable fusion algorithms for BM25 hybrid search

2025-11-17 06:48:43 +01:00

__init__.py

feat: Split read/write scopes into app:read/write scopes

2025-10-24 04:38:49 +02:00

test_app_password_storage.py

test: Add comprehensive tests for app password storage and provisioning

2026-01-13 21:44:23 +01:00

test_auth_tools.py

feat: add Docker Compose profiles and Login Flow v2 service

2026-02-27 20:33:54 +01:00

test_basic_auth_middleware.py

fix(config): address reviewer feedback

2025-12-20 21:16:17 +01:00

test_config_validators.py

refactor: remove Smithery deployment mode

2026-03-22 20:15:47 +01:00

test_config.py

fix(mcp): Move all imports to the top of modules

2025-12-26 10:05:27 -06:00

test_document_chunker.py

fix: Add async/await, PDF metadata, and type safety fixes

2025-11-20 02:37:07 +01:00

test_document_processor_config.py

refactor: Transform document parsing into pluggable processor architecture

2025-10-25 19:28:35 +02:00

test_hybrid_auth_setup.py

fix(mcp): Move all imports to the top of modules

2025-12-26 10:05:27 -06:00

test_instrument_tool.py

fix(test): fix 17 pre-existing unit test failures and add astrolabe CI build

2026-02-27 21:53:06 +01:00

test_logging_filter.py

chore: Remove /health and /metrics endpoints from logging

2025-11-10 02:07:45 +01:00

test_login_flow.py

fix: address PR review — XSS escape, asyncio→anyio, URL rewrite dedup

2026-03-30 08:51:41 +02:00

test_management_app_password_endpoints.py

fix(test): fix 17 pre-existing unit test failures and add astrolabe CI build

2026-02-27 21:53:06 +01:00

test_management_pdf_preview_endpoint.py

refactor(api): split management.py into domain-focused modules

2026-01-26 21:28:18 +01:00

test_management_status_endpoint.py

fix(test): fix 17 pre-existing unit test failures and add astrolabe CI build

2026-02-27 21:53:06 +01:00

test_progress_notification.py

feat: Add text processing background worker for telling client about progress

2025-10-25 19:52:45 +02:00

test_provision_routes.py

fix: address PR review — XSS escape, asyncio→anyio, URL rewrite dedup

2026-03-30 08:51:41 +02:00

test_response_models.py

fix: handle pythonvCard4 dict-format fields and missing phone numbers (#601)

2026-03-03 09:32:53 +01:00

test_scope_authorization_stored.py

fix: address review feedback — security, caching, CI 429 retry

2026-03-02 17:22:23 +01:00

test_scope_decorator.py

feat: Split read/write scopes into app:read/write scopes

2025-10-24 04:38:49 +02:00

test_ssl_config.py

fix: convert CA bundle path to ssl.SSLContext to avoid httpx deprecation warning

2026-02-16 13:27:22 +01:00

test_token_broker.py

feat(auth): implement refresh token rotation for Nextcloud OIDC

2025-12-18 00:01:53 +01:00

test_unified_verifier.py

refactor: Eliminate duplicate validation logic in UnifiedTokenVerifier

2025-11-05 21:58:52 +01:00

test_webhook_presets.py

feat: add webhook management UI and BeforeNodeDeletedEvent support

2025-11-11 20:35:08 +01:00

test_webhook_storage.py

feat(ollama): Pull model on startup if not available in ollama

2025-11-12 00:37:26 +01:00