All pull requests

Pull requests

• fix: guard knowledge file mutations

  #27·cursor[bot] opened Aug 25, 2026Bot·6 of 8 tasks·

  ·

• fix: enforce tool access and skip stale socket sessions

  #26·cursor[bot] opened Aug 24, 2026Bot·6 of 8 tasks·

  ·

• fix: guard retrieval file processing access

  #25·cursor[bot] opened Aug 23, 2026Bot·7 of 8 tasks·

  ·

• fix: preserve RAG/STT config and block unsafe iframe sources

  #24·cursor[bot] opened Aug 21, 2026Bot·6 of 8 tasks·

  ·

• fix: preserve RAG upload limits and block unsafe iframes

  #23·cursor[bot] opened Aug 17, 2026Bot·6 of 8 tasks·

  ·

• fix: enforce critical permission and config boundaries

  #22·cursor[bot] opened Jul 20, 2026Bot·5 of 8 tasks·

  ·

• fix: block unsafe generic iframe embeds

  #21·cursor[bot] opened Jul 19, 2026Bot·5 of 8 tasks·

  ·

• fix: sync empty trusted header groups

  #20·cursor[bot] opened Jul 18, 2026Bot·5 of 8 tasks·

  ·

• fix: enforce feature permissions server-side

  #19·cursor[bot] opened Jul 17, 2026Bot·6 of 8 tasks·

  ·

• fix: require consent before load-url fetches

  #18·cursor[bot] opened Jul 16, 2026Bot·5 of 8 tasks·

  ·

• fix: enforce system prompt permission server-side

  #17·cursor[bot] opened Jul 14, 2026Bot·4 of 8 tasks·

  ·

• fix: prevent critical config and permission regressions

  #16·cursor[bot] opened Jul 13, 2026Bot·4 of 8 tasks·

  ·

• fix: enforce chat system prompt permission server-side

  #15·cursor[bot] opened Jun 18, 2026Bot·6 of 8 tasks·

  ·

• fix: block unsafe iframe sources in markdown

  #14·cursor[bot] opened Jun 17, 2026Bot·6 of 8 tasks·

  ·

• fix: handle null group permissions

  #13·cursor[bot] opened Jun 16, 2026Bot·6 of 8 tasks·

  ·

• fix: enforce tool ACLs before execution

  #12·cursor[bot] opened Jun 15, 2026Bot·6 of 8 tasks·

  ·

• fix: enforce trusted-header and retrieval access checks

  #11·cursor[bot] opened Jun 14, 2026Bot·5 of 8 tasks·

  ·

• fix: normalize STT MIME and enforce system prompt permission

  #10·cursor[bot] opened Jun 13, 2026Bot·6 of 8 tasks·

  ·

• fix: sync empty external auth groups

  #9·cursor[bot] opened May 20, 2026Bot·6 of 8 tasks·

  ·

• fix: lock down task stop and trusted header checks

  #8·cursor[bot] opened May 19, 2026Bot·6 of 8 tasks·

  ·

• fix: enforce configured image compression dimensions

  #7·cursor[bot] opened May 18, 2026Bot·6 of 8 tasks·

  ·

• fix: guard chat completion error writes

  #6·cursor[bot] opened May 17, 2026Bot·5 of 8 tasks·

  ·

• fix: revoke ldap groups when sync returns empty

  #5·cursor[bot] opened May 16, 2026Bot·5 of 8 tasks·

  ·

• fix: restore default STT content type matching

  #4·cursor[bot] opened May 14, 2026Bot·6 of 8 tasks·

  ·

• fix: prevent cross-user chat completion writes

  #3·cursor[bot] opened May 13, 2026Bot·6 of 8 tasks·

  ·