nesquena-hermes 9a5435176d fix: broaden session ID validator to support new hermes-agent format (#212) ... * fix: broaden session ID validator to support new hermes-agent format * test: add more path traversal evil IDs to session validator test Add null byte, backslash, forward slash, and dot-extension variants to the rejected session ID test to cover additional attack vectors. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Nathan Esquenazi <nesquena@gmail.com> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>		2026-04-10 00:00:02 -07:00
..
__init__.py	Hermes Web UI — Sprints 11-14: multi-provider models, settings, session QoL, alerts, polish	2026-03-31 07:02:47 +00:00
auth.py	fix(auth): prune expired sessions on every verify to prevent memory leak (#196)	2026-04-09 18:05:23 -07:00
config.py	fix: do not build phantom Custom group when active provider is set (#206)	2026-04-09 18:33:24 -07:00
helpers.py	fix(security): add unsafe-inline and CDN allowlist to CSP script-src (#209)	2026-04-09 19:07:51 -07:00
models.py	fix: broaden session ID validator to support new hermes-agent format (#212)	2026-04-10 00:00:02 -07:00
profiles.py	chore: add missing type hints across 10 files	2026-04-05 13:30:20 +07:00
routes.py	fix: support CLI sessions in /api/list file browser (#204)	2026-04-09 18:18:38 -07:00
state_sync.py	fix: sync message_count to state.db for /insights (#163) (#164)	2026-04-06 22:56:27 -07:00
streaming.py	fix: surface approval prompt in UI instead of getting stuck in Thinking (#187)	2026-04-08 20:16:22 -07:00
updates.py	fix: use current branch upstream for update checks instead of default branch (#201)	2026-04-09 18:10:11 -07:00
upload.py	chore: add missing type hints across 10 files	2026-04-05 13:30:20 +07:00
workspace.py	chore: add missing type hints across 10 files	2026-04-05 13:30:20 +07:00