mirror of
https://github.com/hcengineering/platform.git
synced 2026-08-17 18:05:42 +02:00
Artyom SavchenkoandGitHub
9b607d36ea
* Fix cross-workspace blob/thumbnail and metadata disclosure The preview pod's thumbnail and metadata routes did not validate the caller's token against the workspace taken from the URL. Reported-by: Ugur Ozer, Aeon AI Risk Management Signed-off-by: Artyom Savchenko <armisav@gmail.com> * Update copyright year Signed-off-by: Artyom Savchenko <armisav@gmail.com> * Use secure mode Signed-off-by: Artyom Savchenko <armisav@gmail.com> * Fix formatting Signed-off-by: Artyom Savchenko <armisav@gmail.com> * Remove uuid check Signed-off-by: Artyom Savchenko <armisav@gmail.com> --------- Signed-off-by: Artyom Savchenko <armisav@gmail.com>