OmniRoute

mirror of https://github.com/diegosouzapw/OmniRoute.git synced 2026-07-31 04:12:10 +03:00

Files

diegosouzapw 9e198184a7 fix(security): resolve 14 CodeQL code scanning alerts

- Replace polynomial regex /\/+$/ with loop-based stripTrailingSlashes()
  across 8 enterprise provider configs (azure-openai, azureAi, bedrock,
  datarobot, oci, sap, watsonx, audioSpeech) — fixes js/polynomial-redos

- Add prototype-pollution denylist guard in usageHistory.ts to reject
  __proto__/constructor/prototype as model keys — fixes
  js/prototype-polluting-assignment (#167, #168)

- Suppress 3 false-positive js/insufficient-password-hash alerts in
  chatgpt-web.ts and builtins.ts where SHA-256 is used for cache-key
  derivation, not password storage (#176, #177, #178)

- Add stripTrailingSlashes unit tests with ReDoS regression check

2026-04-27 20:00:10 -03:00

e2e

feat: add expert combo configuration mode (#1547 )

2026-04-24 09:04:10 -03:00

helpers

feat(auth): enforce dashboard sessions for management routes

2026-04-17 16:45:27 -03:00

integration

fix: clear INITIAL_PASSWORD and JWT_SECRET in integration tests

2026-04-26 03:49:10 -03:00

load

chore(release): v3.6.6 — Stabilization (#1241 )