pullrequests Search Results · language:Dune language:TypeScript language:JavaScript language:JavaScript
Filter by
176M results
Summary
Alexa events now require an own boolean session.new before request validation, authorization, or lifecycle dispatch.
Malformed truthy values such as the string false can no longer trigger new-session ...
garethpaul
Validates the Host header against PUBLIC_DOMAIN (default logicsrc.com) instead of using it directly in the redirect URL.
Prevents open redirect via crafted Host headers.
Fixes #65
FuturMix
Fresh back-merge of current upstream/main (808f677ab4) into the assembly — keeps the upstream-axis current for the
eventual presentation→upstream PR. Upstream advanced past the #1009 back-merge (340c2456bb); ...
karmafeast
Audit report
No fixable problems found (10 unfixable, 28 only fixable manually using --force)
3. to review
dependencies
nextcloud-command
概述
扩展接入口模块的两批工作,分两个 commit:
1. 收尾 v0.3.0(b55c404)— 补本期声明但未落地的部分
- Plugins P1 骨架(设计 §六):src/plugins/{types,index}.ts — PLUGIN_API_VERSION / PluginsConfigSchema / PluginManifestSchema
/ PluginContext(capability ...
qxbyte
Bumps the per-connector tool set from ~10 to ~20 (balanced read+write) so users have a richer toggle/known set.
- gmail outlook: hand-set, left verbatim (untouched).
- Other originals (gcal, slack, ...
canias7
okorz001Changes Buffer.from(signature) and Buffer.from(expected) to use explicit base64url encoding, matching the .digest(
base64url ) used to generate the signature. The webhook verification already uses explicit ...
Udit007-G
This is an automated pull request to synchronize this repository with the latest configuration
blocklist addition
security-alliance-bot