 pulse-triage[bot]
|
3d05fd3cda
|
Reject competing public SSO and recovery request fields
Validate complete bounded admin objects before decoding or applying them. Preserve singleton aliases, unknown fields, case-sensitive role map keys, explicit access clears, saved secrets and existing tenant and one-use token boundaries. Add public producer, persistence and API contract controls.
Change-source: pulse-maintainer
|
2026-10-24 09:48:15 +01:00 |
|