Siddharth Kumar Sah 8a62093130 fix: reject HTML tags in settings API to prevent stored XSS ...

PUT /api/v1/settings now returns 400 if any key or value contains HTML
tags. Settings are configuration values - there is no legitimate use
case for HTML in them.

2026-03-28 19:08:17 +08:00

..

api.test.ts

fix: reject HTML tags in settings API to prevent stored XSS

2026-03-28 19:08:17 +08:00

branding.test.ts

feat(api): add logo upload/serve/delete routes with tests

2026-03-26 01:10:51 +08:00

docs.test.ts

test(api): add integration tests for API docs endpoint

2026-03-27 13:50:03 +08:00

settings-phase1.test.ts

feat(api): add tool filtering and DB-backed cleanup settings

2026-03-26 01:10:51 +08:00

teams.test.ts

feat(api): add teams CRUD routes and update auth team references

2026-03-26 01:10:51 +08:00

test-server.ts

fix(tests): remove temp DB cleanup that races with other test files

2026-03-28 12:49:23 +08:00