Skip to content

fix(security): sanitize vector store validation error responses in settings router - #31

Merged
spelech merged 1 commit into
mainfrom
fix/codeql-settings-exception-exposure
Sep 27, 2026
Merged

spelech merged 1 commit into
mainfrom
fix/codeql-settings-exception-exposure

Conversation

@spelech

@spelech spelech commented Sep 27, 2026

Copy link
Copy Markdown
Owner

Summary

  • Replaced raw exception string serialization (str(ve)) in vector store test and switch endpoints in app/api/routers/settings.py with static generic messages, logging validation details server-side.

Verification

  • All 14 vector store API integration tests pass.

@spelech
spelech merged commit 999f59d into main Sep 27, 2026
11 checks passed
@spelech
spelech deleted the fix/codeql-settings-exception-exposure branch September 27, 2026 12:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant