maziggy bbbb9d35c7 Bound the scheme repetition in the log credential-redaction pattern. As an ...

unbounded repetition the match was quadratic in the subject length: on a run
of scheme-legal characters the engine restarted at every offset and consumed
to the end before failing to find "://". ffmpeg echoes the configured camera
URL into its stderr and the whole blob reaches the pattern before any
truncation, so the subject length is attacker-influenced.

2026-08-02 11:17:49 +02:00

..

api

Merge branch 'dev' into feature/oidc-env-config

2026-08-01 11:22:58 +02:00

core

Bound the scheme repetition in the log credential-redaction pattern. As an

2026-08-02 11:17:49 +02:00

data

…

i18n

…

models

Merge branch 'dev' into feature/oidc-env-config

2026-07-31 17:05:24 +02:00

schemas

Merge branch 'dev' into feature/oidc-env-config

2026-08-01 11:22:58 +02:00

services

fix(kprofiles): stop reporting rejected K-profile writes as saved

2026-08-01 10:35:22 +02:00

utils

fix(kprofiles): stop reporting rejected K-profile writes as saved

2026-08-01 10:35:22 +02:00

__init__.py

…

cli.py

fix(auth): let API keys manage projects via new can_manage_projects scope (#1893)

2026-07-05 09:58:16 +02:00

main.py

Merge branch 'dev' into feature/oidc-env-config

2026-07-31 17:05:24 +02:00