Repository navigation

fix(security): neutralize CSV formula injection in report exports (#1847) - #2394

Closed

namann5 wants to merge 954 commits into

utksh1:mainfrom

namann5:fix/csv-formula-injection

This pull request is big! We're only showing the most recent 250 commits

Commits on Jun 30, 2026
- Merge branch 'main' into ci/doc-link-validation-884-clean
  riyanshigupta890-cloud
  authored
  fa80d9e
Commits on Jul 1, 2026
Commits on Jul 2, 2026
- docs: update browser auth session flow (#1555)
  
  Tomeshwari-02
  and
  Tomeshwari-02
  authored
  9edf153
- test(secret_scanner): add parser fallback coverage (#1556)
  deepsikha-dash
  authored
  846d190
- feat(validation): introduce string length constraints on policy, profile, and workflow endpoints (#1557)
  Rafiaminhaj
  authored
  604e4e5
- test: add unit tests for executor_target_helpers.extract_target (#1563)
  tmdeveloper007
  authored
  5cb0dd4
- test: add unit tests for wpscan plugin parser helpers (#1564)
  tmdeveloper007
  authored
  09c55a7
- test: add unit tests for hashcat plugin parser (#1565)
  tmdeveloper007
  authored
  d95c69a
- test: add unit tests for port-scanner plugin parser (#1566)
  tmdeveloper007
  authored
  1369bac
- test: add unit tests for virtual-host-finder plugin parser (#1567)
  tmdeveloper007
  authored
  2a6adf7
- feat(zap_scanner): replace placeholder connector with ZAP baseline command
  deepsikha-dash
  committed
  b64a68a
- fix: sse toctou race (#1523)
  ionfwsrijan
  authored
  4b7bdc0
- fix: notification history bola (#1522)
  ionfwsrijan
  authored
  a12f939
- fix: concurrency limiter corruption (#1521)
  ionfwsrijan
  authored
  74a3b0a
- test(yara_scan): add parser unit tests
  deepsikha-dash
  committed
  f0cbdff
- test: add unit tests for useVirtualList hook behavior
  jiya2401
  committed
  b85d223
- fix: remove trailing whitespace
  jiya2401
  committed
  5d5cfc5
- test: authenticate settings e2e via session check
  Tomeshwari-02
  committed
  cc4f9bc
- fix: include credentials on task streams
  Tomeshwari-02
  committed
  d725d39
- fix: log out during settings purge
  Tomeshwari-02
  committed
  5cb653c
- test: include all Playwright e2e specs
  Tomeshwari-02
  committed
  76020b5
- test: extract and test iter_raw_output_chunks from routes.py
  tmdeveloper007
  committed
  f737410
- fix: re-export SSE_RAW_OUTPUT_CHUNK_SIZE for integration test compatibility
  tmdeveloper007
  committed
  c3d2e07
- test: add null-byte and edge case tests for JSONFormatter
  tmdeveloper007
  committed
  3fa1651
- test: add boundary case tests for effective_capabilities and CapabilityEnforcer
  tmdeveloper007
  committed
  1e4e485
- test: add IPv6, credential, fragment, and encoding edge cases for _parse_url_hostname
  tmdeveloper007
  committed
  366cb38
- test: add Unicode and long-string edge case tests for redact()
  tmdeveloper007
  committed
  e64e4bb
- test: add special-character and concurrency edge cases for RequestIDMiddleware
  tmdeveloper007
  committed
  afe58ee
- ci: block committed Python cache files
  anshikaagr
  committed
  22d848b
- Type Framer Motion spring transitions without as-any casts (#1409)
  jiya2401
  committed
  69386b4
- test: add cross-file markdown link validation
  shivanshanand
  committed
  72ae8f2
- Deleted a file which was not related to this issue.
  Rakshak05
  committed
  6e97fd9
- Merge branch 'main' into issue-#1424
  Rakshak05
  authored
  666ead7
- feat: frontend auth flow
  madsysharma
  committed
  3a9c57e
Commits on Jul 3, 2026
Commits on Jul 4, 2026
Commits on Jul 5, 2026
Commits on Jul 6, 2026
Commits on Jul 7, 2026
Commits on Jul 8, 2026
- fix(security): isolate plugin parser subprocess network
  anshul23102
  committed
  cbab7b8
- fix: report webhook redirects as failures instead of silent success
  namann5
  committed
  8c6963f
- test(nikto): add malformed-output tests for parser fallback paths
  
  NaitikVerma6776
  and
  cursoragent
  committed
  f34d526
- feat(backend): add migration tracking and schema version validation
  deepsikha-dash
  committed
  67c8929
- refactor(TaskDetails): replace chart and map callback any usage
  
  NaitikVerma6776
  and
  cursoragent
  committed
  cdcc2d3
- refactor(Scans): replace task inputs any with ScanInputs type
  
  NaitikVerma6776
  and
  cursoragent
  committed
  5f8be91
- fix(plugins): reject declared signatures when signing key is missing
  
  NaitikVerma6776
  and
  cursoragent
  committed
  8dd6428
- Resolves issue-#1402
  Rakshak05
  committed
  d42e230
- Resolves issue-#35
  Rakshak05
  committed
  b4934eb
- Fix trailing whitespaces
  Rakshak05
  committed
  b4e2520
- Fix vault regex alternation and correct preview route unit test inputs
  Rakshak05
  committed
  45f3413
Commits on Jul 9, 2026
Commits on Jul 13, 2026
Commits on Jul 14, 2026
- Fix: add auth and owner isolation to saved views API (closes #1743)
  Your Name
  committed
  5c5f8fa
- fix: avoid confidence boost for unknown fingerprint strength (#2017)
  Aish-kul16
  authored
  12b4f41
- Merge branch 'main' into fix-saved-views-1743
  S0412-2007
  authored
  59bd5d7
Commits on Jul 17, 2026
Commits on Jul 20, 2026
- Resolves issue-#1414
  Rakshak05
  committed
  b73e2e8
- fix(plugins): enforce strict validation for missing custom parser & add test suite
  i-OmSharma
  committed
  0ad8323
- test(tls): resolve httpx client.stream context manager mock leak and type errors
  i-OmSharma
  committed
  4181b82
- Merge pull request #2041 from i-OmSharma/feature/plugins-custom-parser-validation
  utksh1
  authored
  06a5a91
- Merge pull request #2040 from username/fix-tls-verification-tests
  utksh1
  committed
  4f9416b
- Merge main into PR #2039
  utksh1
  committed
  11d70b2
- fix(security): add usedforsecurity=False to SHA1 hashing for non-crypto ID generation
  utksh1
  committed
  b4dd06d
- fix: redact target field and recursively redact evidence (#17)
  sahare77
  committed
  5fb61e0
- Merge main into PR #2038
  utksh1
  committed
  0fdc994
- Merge main into PR #2037
  utksh1
  committed
  a4d5f1e
- test: update test_settings_default_debug to expect False
  utksh1
  committed
  c5efeca
- test: override auth dependency in saved_views tests
  utksh1
  committed
  a6bea4e
- Merge branch 'fix/auth-bypass-saved-views'
  utksh1
  committed
  973c80c
- Merge main into PR #2042
  utksh1
  committed
  e5f19f3
- Merge branch 'main' into fix-saved-views-1743
  S0412-2007
  authored
  a0c75d0
Commits on Jul 21, 2026
- fix(backend): standardize timezone handling to UTC ISO-8601
  
  NaitikVerma6776
  authored and
  cursoragent
  committed
  3d1a1ce
- fix(backend): preserve UTC micros and update TLS stream mocks
  
  NaitikVerma6776
  authored and
  cursoragent
  committed
  396a889
- Fix #1748: make cloud-metadata/private-range denylist non-overridable
  
  Contributor
  authored and
  Your Name
  committed
  391cbc6
Commits on Jul 22, 2026
Commits on Jul 24, 2026
- test(scapy_recon): add parser regression tests (#1710)
  Khanvilkarshravani27
  authored
  c0d5b5e
Commits on Jul 30, 2026
- Fix/docker network exposure (#2268)
  shravanithouta108
  authored
  1c33d64
Commits on Aug 2, 2026
- fix(security): neutralize CSV formula injection in report exports (#1847)
  namann5
  committed
  d2edb60
Commits on Aug 4, 2026
Commits on Aug 5, 2026