pad/internal at fa3aee656110708d0432d2cd0db4611589ff3252 - pad

mirror of https://github.com/PerpetualSoftware/pad.git synced 2026-09-23 02:53:31 +00:00

Files

T

xarmian fa3aee6561 fix: SQL injection in field filters, document search ranking, item search ordering

- Sanitize field-filter keys from query params before interpolating
  into JSON path expressions — prevents SQL injection via crafted
  query parameter names (affects both SQLite and PostgreSQL)
- Fix document search ORDER BY rank on PostgreSQL — the PG query
  path doesn't expose a `rank` column; use ts_rank() with DESC
- Fix item search rank ordering in ListItems and SearchItems for
  PostgreSQL — ts_rank() needs DESC (higher = more relevant)

2026-04-05 23:59:53 +00:00

cli

feat: agent roles — role-based (user, role) assignment for items (#58 )

2026-04-03 21:16:38 -04:00

collections

Unify relation fields and item links into single dependency system (#66 )

2026-04-04 19:47:57 -04:00

config

PHASE-12: Security Hardening for Pad Cloud (#67 )

2026-04-05 10:26:00 -04:00

diff

Initial release