Files
pulse/docs/release-control
pulse-triage[bot] 69b88efe28 fix(notifications): reject encoded dead-man event endpoints
Validate the decoded URL path so encoded fail/start/log suffixes cannot pass the existing success-endpoint guard. Cover encoded separators, valid base URLs, and runtime rejection without transport or token disclosure.

Change-source: pulse-maintainer
2026-09-08 03:59:00 +01:00
..