Salastil/odysseus
1
0
Fork 0
mirror of https://github.com/pewdiepie-archdaemon/odysseus.git synced 2026-08-02 11:38:40 -04:00
Code Issues Packages Projects Releases Wiki Activity
1,282 Commits 7 Branches 0 Tags
722a42c19dffd5379949430074a2c25e6a5fd00a
Commit Graph

3 Commits

Author SHA1 Message Date
pewdiepie-archdaemon 06a0d3ce92 Reapply "Merge branch 'main' of github.com:pewdiepie-archdaemon/odysseus" 
This reverts commit 67bf3f6b78.
 2026-06-03 22:47:00 +09:00
pewdiepie-archdaemon 67bf3f6b78 Revert "Merge branch 'main' of github.com:pewdiepie-archdaemon/odysseus" 
This reverts commit 3a790b792b, reversing
changes made to 082aa4ee48.
 2026-06-03 22:46:19 +09:00
Alexandre Teixeira a24ed1ec6b Harden API-token chat endpoint selection 
Validate only token-supplied direct base_url values for API-token chat requests, while keeping admin-configured endpoints available for local/LAN providers.

Scope configured endpoint fallback selection to the API token owner, fail closed for unknown token owners, and preserve strict session ownership checks when resuming sessions from chat-scoped API tokens.

Add focused regression coverage for direct base_url SSRF rejection, configured endpoint fallback behavior, token-owner scoping, URL validation, and null-owner session/endpoint handling.
 2026-06-03 13:05:13 +01:00