maziggy 3da4eee16e Bound the scheme repetition in the log credential-redaction pattern. As an ...

unbounded repetition the match was quadratic in the subject length: on a run
of scheme-legal characters the engine restarted at every offset and consumed
to the end before failing to find "://". ffmpeg echoes the configured camera
URL into its stderr and the whole blob reaches the pattern before any
truncation, so the subject length is attacker-influenced.

2026-08-02 11:17:24 +02:00

..

__init__.py

…

asyncio_handlers.py

…

auth.py

fix(overlay): authenticate the OBS overlay with a token when login is enabled (#2613)

2026-07-20 13:04:35 +02:00

catalog_defaults.py

…

compat.py

…

config.py

Fix per-job queue ETA showing for jobs that cannot start now

2026-08-02 09:54:41 +02:00

database.py

Merge branch 'dev' into feature/oidc-env-config

2026-07-31 17:05:24 +02:00

db_dialect.py

…

encryption.py

…

local_config.py

feat(system): NTP-gate state on /api/v1/system/appliance

2026-06-22 14:23:30 +02:00

logging_filters.py

Bound the scheme repetition in the log credential-redaction pattern. As an

2026-08-02 11:17:24 +02:00

oidc_env.py

fix(oidc): strip the required BAMBUDDY_OIDC_* values and register the local-login bypass

2026-08-01 11:37:01 +02:00

paths.py

…

permissions.py

feat(slicer): Slicer Pipelines — save & reuse a preset bundle in one click (#1425 PR A)

2026-06-27 13:56:18 +02:00

tasks.py

…

trace.py

…

websocket.py

feat(toast): restore upload-progress toast for scheduler dispatches (#1625 follow-up)

2026-06-27 11:28:00 +02:00