4 Commits

Author	SHA1	Message	Date
pewdiepie-archdaemon	39eabbb27a	Merge remote-tracking branch 'origin/dev' ... # Conflicts: # routes/document_routes.py	2026-07-01 10:11:22 +00:00
Alexandre Teixeira	2412db1583	fix(security): harden gallery endpoint URL checks (#4981) ... Replace substring OpenAI endpoint detection with exact parsed-host matching. Route gallery image endpoint construction through a constant path allowlist. Remove client-visible exception and upstream response body leaks from gallery image flows while preserving diagnostics in server logs. Add focused regression tests for OpenAI host matching, checked endpoint joining, harmonize SSRF hardening, and sanitized client errors.	2026-06-30 19:16:34 +02:00
pewdiepie-archdaemon	3b6d771be9	Restore chat thumbnails and gallery OCR captions	2026-06-29 01:19:50 +00:00
Tal.Yuan	8066a8e0cd	refactor(routes): move gallery domain into routes/gallery subpackage (#4903) ... Move the gallery route domain into routes/gallery/ while preserving backward-compatible legacy import shims. - app imports the canonical gallery route module - canonical gallery route code imports canonical gallery helpers - legacy gallery route/helper paths remain compatibility aliases - add shim regression coverage for module identity and monkeypatch behavior - repoint gallery source-introspection tests to the canonical paths No intended behavior change.	2026-06-28 10:40:34 +01:00