Jake/odysseus
1
0
Fork 0
mirror of https://github.com/pewdiepie-archdaemon/odysseus.git synced 2026-07-08 11:56:59 +00:00
Code Packages Projects Releases Activity
1,765 Commits 6 Branches 0 Tags
7094c8e285e5aaac723009e424dbc1818e70fbb3
Commit Graph

7 Commits

Author SHA1 Message Date
Afonso Coutinho ad745801c6 fix(visual_report): ignore fenced headings in TOC extraction 
Strip fenced code blocks before extracting visual-report headings so heading-looking lines inside code fences do not desync TOC anchors. Add regression coverage for backtick and tilde fences while preserving normal heading extraction.
 2026-06-27 17:44:32 +01:00
Miraç Duran d5286f926e fix(visual_report): make TOC heading slugs unique 
Ensure generated visual-report TOC slugs cannot collide with naturally occurring slug names. Add regression coverage for duplicate headings, natural suffix collisions, and unchanged distinct headings.
 2026-06-27 17:36:17 +01:00
Joeseph Grey fa1fe7f866 security: sanitize rendered research-report HTML (#364) 
The visual research report is assembled from LLM output over crawled web
pages (untrusted content) and served under a relaxed `script-src
'unsafe-inline'` CSP. Two values reached that HTML without sanitization:

- `_md_to_html` rendered the report markdown via python-markdown, which
  passes raw HTML through verbatim, so `<script>` / `<img onerror>` /
  `<svg onload>` / `javascript:` links carried in crawled content ran in
  the app origin.
- `category` (from the /api/research/start request body, no enum check) was
  interpolated raw into `<body class="category-{category}">`.

Allowlist-sanitize the rendered markdown with nh3, keeping the formatting
the report emits (tables, code, details/summary, toc anchors, codehilite
classes, external-link target/rel) while dropping active content, and
html.escape the category. Adds regression tests.
 2026-06-04 13:42:49 +01:00
Afonso Coutinho 1161040efe fix: visual report drops photos whose URL slug contains icon or logo (#1685) 2026-06-03 14:22:45 +09:00
Afonso Coutinho 3a741edbf1 fix: visual_report markdown helpers crash on a non-string input (#1633) 2026-06-03 14:06:35 +09:00
Alexander Kenley 07d92556a3 Fix visual report chapter navigation (#505) 
Co-authored-by: Alex Kenley <Alex.Kenley@threatvectorsecurity.com>
 2026-06-01 22:26:13 +09:00
pewdiepie-archdaemon e5c99a5eee Odysseus v1.0 2026-05-31 23:58:26 +09:00