02b5f885c8
Embed local MEDIA: image refs as inline base64 at snapshot-build time, gated by a workspace/attachment-root allow-list, 512KiB cap, image-MIME allow-list, and magic-byte content validation. Everything else (traversal, symlink-escape, file://, non-image, SVG, oversize) becomes a static placeholder. Closes P0 #6174 (public shares no longer emit authenticated /api/media requests for local paths). Co-authored-by: webtecnica <webtecnica@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| agent_health.py | ||
| agent_runtime.py | ||
| agent_sessions.py | ||
| auth.py | ||
| auth_oidc.py | ||
| background.py | ||
| background_process.py | ||
| clarify.py | ||
| commands.py | ||
| compression_anchor.py | ||
| compression_recovery.py | ||
| config.py | ||
| crash_visibility.py | ||
| dashboard_probe.py | ||
| extension_sidecar_auth.py | ||
| extensions.py | ||
| gateway_chat.py | ||
| gateway_restart.py | ||
| gateway_watcher.py | ||
| goals.py | ||
| helpers.py | ||
| kanban_bridge.py | ||
| metering.py | ||
| models.py | ||
| oauth.py | ||
| office_documents.py | ||
| onboarding.py | ||
| passkeys.py | ||
| paths.py | ||
| plugin_providers.py | ||
| plugins.py | ||
| process_event_utils.py | ||
| profiles.py | ||
| providers.py | ||
| request_diagnostics.py | ||
| rollback.py | ||
| route_approvals.py | ||
| route_session_list_cache.py | ||
| routes.py | ||
| run_journal.py | ||
| runner_client.py | ||
| runtime_adapter.py | ||
| session_discoverability.py | ||
| session_events.py | ||
| session_export_html.py | ||
| session_lifecycle.py | ||
| session_ops.py | ||
| session_recovery.py | ||
| shares.py | ||
| skill_usage.py | ||
| sse_chunked.py | ||
| startup.py | ||
| state_sync.py | ||
| streaming.py | ||
| system_health.py | ||
| terminal.py | ||
| todo_state.py | ||
| turn_journal.py | ||
| updates.py | ||
| upload.py | ||
| usage.py | ||
| webui_session_db.py | ||
| workspace.py | ||
| workspace_git.py | ||
| worktrees.py | ||