caoimhinr/corvid
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
No description
18 commits 2 branches 0 tags 216 KiB
Find a file
root 0097055c15 security: fix command injection, XSS, prefix validation, cycle detection 
- mcp_server.py: use shlex.quote() on all shell-interpolated values to
  prevent command injection via ticket title/description/human_id
- corvid/router.py: add alphanumeric-only regex validation for environment
  prefix; add full ancestor cycle detection before setting parent_id;
  import re
- Add SECURITY_REVIEW.md

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-02 13:27:20 +00:00
alembic feat: add environments — parametric ticket ID prefixes, env selector UI, MCP tools 2026-05-25 20:14:59 +02:00
corvid security: fix command injection, XSS, prefix validation, cycle detection 2026-06-02 13:27:20 +00:00
.env.example security: timing-safe API key comparison, remove hardcoded DB password 2026-05-25 19:46:25 +02:00
.gitignore chore: add .gitignore, remove tracked pycache and egg-info 2026-05-25 19:23:17 +02:00
alembic.ini feat: initial corvid — standalone ticket service extracted from homelab-dashboard 2026-05-25 19:23:07 +02:00
CLAUDE.md docs: add IaC sync reminder to CLAUDE.md 2026-05-27 21:44:38 +02:00
docker-compose.yml security: timing-safe API key comparison, remove hardcoded DB password 2026-05-25 19:46:25 +02:00
Dockerfile feat: add standalone web UI — tickets page with same style as homelab-dashboard 2026-05-25 19:30:43 +02:00
entrypoint.sh feat: initial corvid — standalone ticket service extracted from homelab-dashboard 2026-05-25 19:23:07 +02:00
mcp_server.py security: fix command injection, XSS, prefix validation, cycle detection 2026-06-02 13:27:20 +00:00
pyproject.toml fix: include templates/ and static/ in installed package 2026-05-25 20:28:54 +02:00
SECURITY_REVIEW.md security: fix command injection, XSS, prefix validation, cycle detection 2026-06-02 13:27:20 +00:00