All pull requests

Pull requests

• [INFRA-1146] fix(security): scope public Space asset uploads to comments

  #10071·dheeru0198 opened Oct 16, 2026Member·1 of 6 tasks·

  ·
  3

• [INFRA-1180] fix(security): bring v1 API permissions in line with the app

  #10070·dheeru0198 opened Oct 16, 2026Member·1 of 6 tasks·

  ·
  4

• [INFRA-1158] fix(security): require a non-empty matching OAuth state

  #10069·dheeru0198 opened Oct 16, 2026Member·1 of 6 tasks·

  ·
  8

• [INFRA-1149] fix(security): apply entity role rules to asset changes

  #10068·dheeru0198 opened Oct 16, 2026Member·1 of 6 tasks·

  ·
  10

• [INFRA-1166] fix(security): apply guest_view_all_features in search

  #10067·dheeru0198 opened Oct 16, 2026Member·1 of 6 tasks·

  ·
  3

• [INFRA-1163] fix(security): scope favorites to entities the caller can see

  #10066·dheeru0198 opened Oct 16, 2026Member·1 of 6 tasks·

  ·
  3

• [INFRA-1174] fix(security): scope project stats and grouping keys

  #10065·dheeru0198 opened Oct 16, 2026Member·1 of 6 tasks·

  ·
  3

• [INFRA-1116] fix(security): restrict user-scoped FKs on users/me updates

  #10064·dheeru0198 opened Oct 16, 2026Member·1 of 6 tasks·

  ·
  5

• [INFRA-1208] fix(security): limit public comment writes to content fields

  #10063·dheeru0198 opened Oct 16, 2026Member·1 of 6 tasks·

  ·
  5

• [INFRA-1200] fix(security): apply project guest scope to issue exports

  #10062·dheeru0198 opened Oct 16, 2026Member·1 of 6 tasks·

  ·
  3

• [INFRA-1195] fix(security): verify Redis TLS certificates by default

  #10061·dheeru0198 opened Oct 16, 2026Member·1 of 6 tasks·

  ·
  6

• [INFRA-1194] fix(security): scope activity-task lookups to issue scope

  #10060·dheeru0198 opened Oct 16, 2026Member·1 of 6 tasks·

  ·
  3

• [INFRA-1189] fix(security): throttle auth endpoints for every caller

  #10059·dheeru0198 opened Oct 16, 2026Member·1 of 6 tasks·

  ·
  9

• [INFRA-1188] fix(security): require project membership for creator access

  #10058·dheeru0198 opened Oct 16, 2026Member·1 of 6 tasks·

  ·
  3

• [INFRA-1182] fix(security): make deploy board identity fields read-only

  #10057·dheeru0198 opened Oct 16, 2026Member·1 of 6 tasks·

  ·
  3

• [INFRA-1169] fix(security): bind module and cycle ids to the URL project

  #10056·dheeru0198 opened Oct 16, 2026Member·1 of 6 tasks·

  ·
  3

• [INFRA-1164] fix(security): restrict project member updates to admins

  #10055·dheeru0198 opened Oct 16, 2026Member·1 of 6 tasks·

  ·
  3

• [INFRA-1156] fix(security): sanitize export history order_by

  #10054·dheeru0198 opened Oct 16, 2026Member·1 of 6 tasks·

  ·
  3

• [INFRA-1153] fix(security): strip email style blocks in linear time

  #10053·dheeru0198 opened Oct 16, 2026Member·1 of 6 tasks·

  ·
  3

• [INFRA-1152] fix(security): mark session cookies Secure when WEB_URL is https

  #10052·dheeru0198 opened Oct 16, 2026Member·1 of 6 tasks·

  ·
  3

• [INFRA-1145] fix(security): bind issue history to the URL project

  #10051·dheeru0198 opened Oct 16, 2026Member·1 of 6 tasks·

  ·
  3

• [INFRA-1140] fix(security): bind URL issue_id to the URL project on creates

  #10050·dheeru0198 opened Oct 16, 2026Member·1 of 6 tasks·

  ·
  3

• [INFRA-1139] fix(security): scope user-profile stats and issues endpoints

  #10049·dheeru0198 opened Oct 16, 2026Member·1 of 6 tasks·

  ·
  3

• [INFRA-1118] fix(security): make work item system fields read-only

  #10048·dheeru0198 opened Oct 16, 2026Member·1 of 6 tasks·

  ·
  3

• [INFRA-1125] fix(security): require project membership for workspace drafts

  #10047·dheeru0198 opened Oct 16, 2026Member·1 of 6 tasks·

  ·
  7