fix: upgrade credential encryption key derivation to PBKDF2 - #1020

Open

kwp3 wants to merge 9 commits into

lfnovo:mainfrom

kwp3:fix/encryption-pbkdf2-upgrade

Commits on Jul 8, 2026

fix: prevent SurrealQL injection in repo_relate/repo_upsert/repo_update
kwp3
committed
5869b91
fix: use constant-time comparison for the API password
kwp3
committed
04cfbea
fix: stop compiling user-controlled prompts as Jinja2 template source
kwp3
committed
5ae0c01
fix: add SSRF protection to source-URL ingestion
kwp3
committed
54f0080
fix: re-validate provider-credential URLs at request time, not just save time
kwp3
committed
d17c560
fix: sanitize raw HTML in the note/transformation markdown preview
kwp3
committed
19ac94d
fix: batch source-insight lookups when building notebook/chat context
kwp3
committed
2382bbd
fix: run file upload writes off the event loop
kwp3
committed
3b9cb26
fix: upgrade credential encryption key derivation to PBKDF2
kwp3
committed
f329843