remarkbox/remarkbox
russell@unturf.com c87fb0bd1f fix: cap search keywords and query results to prevent CWE-407 amplification
- list_nodes.py: strip empty tokens, cap keywords to 10 before passing to model
- node.py: add .limit(200) per keyword query — was unbounded .all()
- namespace.py: add .limit(500) on root.children in dict_dump — was unbounded iteration
- __init__.py: cap page_number to 1000 — large offsets force full table scans
2026-03-28 15:12:39 -04:00
..
api Add revision diff endpoint and progressive enhancement export/wiki UI. 2026-03-10 11:13:39 -04:00
lib Operation Undigg: multi-syntax input, pandoc export, wiki mode, auto-themes. 2026-03-10 00:35:51 -04:00
models fix: cap search keywords and query results to prevent CWE-407 amplification 2026-03-28 15:12:39 -04:00
scripts Operation Undigg: multi-syntax input, pandoc export, wiki mode, auto-themes. 2026-03-10 00:35:51 -04:00
static Prevent long inline code from blowing out page width on mobile. 2026-02-09 09:44:38 -05:00
stripe Replace deprecated Stripe Sources API with Stripe Checkout 2025-12-19 20:52:38 -05:00
templates Add revision diff endpoint and progressive enhancement export/wiki UI. 2026-03-10 11:13:39 -04:00
tests Skip PDF tests when wkhtmltopdf unavailable (fixes CI). 2026-03-10 11:22:01 -04:00
views fix: cap search keywords and query results to prevent CWE-407 amplification 2026-03-28 15:12:39 -04:00
__init__.py fix: cap search keywords and query results to prevent CWE-407 amplification 2026-03-28 15:12:39 -04:00
routes.py Add spam moderation UI, node spam fields, and namespace spam toggle 2026-02-02 14:13:47 -05:00