opensource/WeKnora
3
0
Fork 0
mirror of https://github.com/Tencent/WeKnora.git synced 2026-09-01 14:53:07 +08:00
Code Issues Packages Projects Releases Wiki Activity
2,877 Commits 51 Branches 43 Tags
main
Commit Graph

2 Commits

Author SHA1 Message Date
wizardchen 26cc335420 fix(security): apply MCP upload sandbox when transport is set via CLI 
Record the active transport at run_stdio/run_sse/run_http startup so
create_knowledge_from_file path checks apply even when MCP_TRANSPORT
is not set in the environment.
 2026-07-02 17:08:17 +08:00
wizardchen 040504447e fix(security): block refresh tokens as bearer and sandbox MCP uploads 
Reject refresh JWTs in ValidateToken, revoke all user sessions on logout,
and restrict create_knowledge_from_file to allowed directories on network MCP transports.
 2026-07-02 17:08:17 +08:00