Repository navigation

security: guardrails for untrusted portal content; scope credentials across redirects - #4

Open

sgarcese wants to merge 25 commits into

CityOfBoston:mainfrom

sgarcese:upstream/security-guardrails

Commits on Sep 13, 2026
- refactor: remove stale duplicate entry points
  
  sgarcese
  and
  Kimi K2.6 via opencode
  committed
  2a65d49
- docs: point curl examples at the /mcp route
  
  sgarcese
  and
  claude
  committed
  8f5f48a
- perf: persist event loop across Lambda invocations
  
  sgarcese
  and
  GLM 5.2 via opencode
  committed
  27c3eef
- refactor: add shared plugin base classes (BaseOpenDataPlugin, BasePluginConfig, BaseQueryValidator)
  
  sgarcese
  and
  GLM 5.2 via opencode
  committed
  a978f5d
- refactor(ckan): migrate onto shared plugin base classes
  
  sgarcese
  and
  GLM 5.2 via opencode
  committed
  132f4ed
- fix(ckan): validate identifiers and metric expressions in aggregate_data
  
  sgarcese
  and
  GLM 5.2 via opencode
  committed
  a341adb
- refactor(socrata): migrate onto shared plugin base classes
  
  sgarcese
  and
  Kimi K2.6 via opencode
  committed
  9669b8e
- refactor(arcgis): migrate onto shared plugin base classes and align with plugin contract
  
  sgarcese
  and
  GLM 5.2 via opencode
  committed
  562577a
- fix(arcgis): restrict feature-service URLs to trusted hosts
  
  sgarcese
  and
  GLM 5.2 via opencode
  committed
  b75cb9c
- refactor: modernize plugin template, defer config loading, tidy PluginManager
  
  sgarcese
  and
  Kimi K2.6 via opencode
  committed
  90b32f1
- fix(ckan): restore valid aggregate_data inputs over-rejected by hardening
  
  sgarcese
  and
  claude
  committed
  997265f
- fix(core): validate field identifiers inside build_where_clause
  
  sgarcese
  and
  claude
  committed
  ac8bd9f
- fix(arcgis): address code-review regressions in migration and SSRF guard
  
  sgarcese
  and
  claude
  committed
  21a9441
- fix(socrata): enforce required 'query' argument for search_datasets
  
  sgarcese
  and
  claude
  committed
  cb301bc
- ci: Python 3.11/3.12 matrix, terraform validate job, Dependabot config
  
  sgarcese
  and
  claude
  committed
  789db71
- fix(core): make validate_url a staticmethod for cross-version pydantic reuse
  
  sgarcese
  and
  claude
  committed
  cc7e549
- docs: document the decoupled plugin base layer and ArcGIS plugin
  
  sgarcese
  and
  claude
  committed
  926515d
- ci: remove "Sync develop with main" workflow (#21)
  
  sgarcese
  and
  claude
  committed
  301374b
- feat(opendatasoft): add Opendatasoft Explore v2.1 provider plugin
  
  sgarcese
  and
  claude
  committed
  6650d5e
- docs(opendatasoft): document the Opendatasoft plugin and config example
  
  sgarcese
  and
  claude
  committed
  3543fcc
- fix(opendatasoft): return a single row for global aggregates
  
  sgarcese
  and
  claude
  committed
  cdf85d4
- fix(opendatasoft): address adversarial code-review findings
  
  sgarcese
  and
  claude
  committed
  5ad59c4
- feat(core): guardrails for untrusted portal content flowing into the LLM
  
  sgarcese
  and
  claude
  committed
  0c06af5
- fix(socrata): follow redirects on the SODA client (#19)
  
  sgarcese
  and
  claude
  committed
  c98d03d
- fix(core): scope credential headers across redirects; follow redirects everywhere (#20)
  
  sgarcese
  and
  claude
  committed
  89d660d

Navigation Menu

Repository navigation

security: guardrails for untrusted portal content; scope credentials across redirects - #4

security: guardrails for untrusted portal content; scope credentials across redirects#4
sgarcese wants to merge 25 commits into
CityOfBoston:mainfrom
sgarcese:upstream/security-guardrails

Commits on Sep 13, 2026

refactor: remove stale duplicate entry points

docs: point curl examples at the /mcp route

perf: persist event loop across Lambda invocations

refactor: add shared plugin base classes (BaseOpenDataPlugin, BasePluginConfig, BaseQueryValidator)

refactor(ckan): migrate onto shared plugin base classes

fix(ckan): validate identifiers and metric expressions in aggregate_data

refactor(socrata): migrate onto shared plugin base classes

refactor(arcgis): migrate onto shared plugin base classes and align with plugin contract

fix(arcgis): restrict feature-service URLs to trusted hosts

refactor: modernize plugin template, defer config loading, tidy PluginManager

fix(ckan): restore valid aggregate_data inputs over-rejected by hardening

fix(core): validate field identifiers inside build_where_clause

fix(arcgis): address code-review regressions in migration and SSRF guard

fix(socrata): enforce required 'query' argument for search_datasets

ci: Python 3.11/3.12 matrix, terraform validate job, Dependabot config

fix(core): make validate_url a staticmethod for cross-version pydantic reuse

docs: document the decoupled plugin base layer and ArcGIS plugin

ci: remove "Sync develop with main" workflow (#21)

feat(opendatasoft): add Opendatasoft Explore v2.1 provider plugin

docs(opendatasoft): document the Opendatasoft plugin and config example

fix(opendatasoft): return a single row for global aggregates

fix(opendatasoft): address adversarial code-review findings

feat(core): guardrails for untrusted portal content flowing into the LLM

fix(socrata): follow redirects on the SODA client (#19)

fix(core): scope credential headers across redirects; follow redirects everywhere (#20)