fix: secure document upload transport #412

Merged
admin merged 1 commits from codex/doc0-upload-transport into main 2026-11-02 01:11:28 +00:00
Owner

Change

Require a trusted HTTPS DOC0 URL without embedded credentials, query or fragment, validate timeout bounds, and reject redirects when sending document bytes and the service credential. This client remains internal and requires independently verified tenant and project authorization.

Validation

  • 7 focused client tests passed; full suite 1,245 passed, 190 skipped; typecheck and lint passed (8 unrelated existing lint warnings).
  • Local Next.js build passed with a copied existing dependency tree whose source lockfile differs; CI must verify a clean locked build.
## Change Require a trusted HTTPS DOC0 URL without embedded credentials, query or fragment, validate timeout bounds, and reject redirects when sending document bytes and the service credential. This client remains internal and requires independently verified tenant and project authorization. ## Validation - 7 focused client tests passed; full suite 1,245 passed, 190 skipped; typecheck and lint passed (8 unrelated existing lint warnings). - Local Next.js build passed with a copied existing dependency tree whose source lockfile differs; CI must verify a clean locked build.
admin added 1 commit 2026-11-02 01:09:53 +00:00
fix: secure document upload transport
CI (SIAX Cloud) / integration (push) Skipped
CI (SIAX Cloud) / sonar (push) Skipped
masterplan-lock / check (push) Successful in 5s
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 4s
Security Scan (SIAX Cloud) / security (push) Successful in 13s
CI (SIAX Cloud) / security (push) Successful in 24s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 23s
CI (SIAX Cloud) / security (pull_request) Successful in 29s
CI (SIAX Cloud) / integration (pull_request) Successful in 35s
CI (SIAX Cloud) / quality (pull_request) Successful in 1m5s
CI (SIAX Cloud) / quality (push) Successful in 1m13s
70b92e2fea
CODEOWNERS rules requested review from sax3l 2026-11-02 01:09:53 +00:00
admin merged commit 07fcddadd2 into main 2026-11-02 01:11:28 +00:00
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: admin/0pt#412