open-notebook/open_notebook/database
Luis Novo e5b253b11d fix: prevent SurrealDB injection via order_by and unparameterized queries
- Add allowlist validation for order_by param in notebooks endpoint
- Parameterize session_id query in source_chat router
- Add regex validation in base.py get_all() order_by parameter
- Convert async_migrate bump/lower_version to parameterized queries
2026-04-07 07:58:54 -03:00
..
migrations feat(podcasts): model registry integration, credential passthrough & new features (#632) 2026-02-27 11:06:47 -03:00
async_migrate.py fix: prevent SurrealDB injection via order_by and unparameterized queries 2026-04-07 07:58:54 -03:00
CLAUDE.md feat(podcasts): model registry integration, credential passthrough & new features (#632) 2026-02-27 11:06:47 -03:00
migrate.py Api podcast migration (#93) 2025-07-17 08:36:11 -03:00
repository.py Fix re-embedding issues and improve retry strategy (#515) 2026-01-31 18:55:01 -03:00