Harish Govindarajulu a97ca5c231 fix(oauth): prevent redirect URI validation bypass (PROJQUAY-9849) (#4635) ...

* fix(oauth): prevent redirect URI validation bypass (PROJQUAY-9849)

Co-authored-by: Claude <noreply@anthropic.com>

* test(oauth): add comprehensive coverage for redirect URI validation (PROJQUAY-9849)

Co-authored-by: Claude <noreply@anthropic.com>

* fix(oauth): add percent-encoding protection and improve test coverage (PROJQUAY-9849)

Co-authored-by: Claude <noreply@anthropic.com>

---------

Co-authored-by: Claude <noreply@anthropic.com>

2025-11-25 13:26:38 -05:00

..

oci

db: moving robot search and find repo to garbage collect queries to read replica (PROJQUAY-8792) (#3795)

2025-04-17 15:13:51 +00:00

test

fix(oauth): prevent redirect URI validation bypass (PROJQUAY-9849) (#4635)

2025-11-25 13:26:38 -05:00

__init__.py

db: Added TagPullStatistics and ManifestPullStatistics tables with migrations (PROJQUAY-8414) (#4318)

2025-10-07 10:59:37 -04:00

_basequery.py

api: allowing superuser to read catalog endpoint (PROJQUAY-8023) (#3310)

2024-10-16 09:44:01 -04:00

appspecifictoken.py

feat(api v1): global readonly superuser support and app token visibility (PROJQUAY-8279) (#4276)

2025-10-21 15:00:59 -04:00

autoprune.py

notifications: fetch autoprune tags with multiple policies for image expiry notification (PROJQUAY-8117) (#3340)

2024-10-18 16:17:07 -04:00

blob.py

chore: drop deprecated tables and remove unused code (PROJQUAY-522) (#2089)

2023-08-25 12:17:24 -04:00

build.py

chore: drop deprecated tables and remove unused code (PROJQUAY-522) (#2089)

2023-08-25 12:17:24 -04:00

entitlements.py

marketplace: change redhatsubscriptions model to return a list of customer ids (PROJQUAY-7129) (#2868)

2024-05-09 11:51:06 -04:00

gc.py

feat: Added garbage collection hook for TagPullStatistics and ManifestPullStatistics tables (PROJQUAY-7176) (#4405)

2025-10-28 14:35:28 -04:00

health.py

health: Add statement timeout to health check (PROJQUAY-7950) (#3228)

2024-09-17 09:05:11 -04:00

label.py

chore: drop deprecated tables and remove unused code (PROJQUAY-522) (#2089)

2023-08-25 12:17:24 -04:00

log.py

logs: allow without strict logging (PROJQUAY-7116) (#2846)

2024-06-17 21:17:39 +02:00

message.py

chore: drop deprecated tables and remove unused code (PROJQUAY-522) (#2089)

2023-08-25 12:17:24 -04:00

modelutil.py

chore: drop deprecated tables and remove unused code (PROJQUAY-522) (#2089)

2023-08-25 12:17:24 -04:00

namespacequota.py

quota: only create notification if one doesn't already exist (PROJQUAY-8857) (#4092)

2025-09-02 09:12:32 -04:00

notification.py

quota: only create notification if one doesn't already exist (PROJQUAY-8857) (#4092)

2025-09-02 09:12:32 -04:00

oauth.py

fix(oauth): prevent redirect URI validation bypass (PROJQUAY-9849) (#4635)

2025-11-25 13:26:38 -05:00

organization_skus.py

marketplace: splittable sku for MW02702 (PROJQUAY-8151) (#3389)

2025-01-09 09:37:09 -05:00

organization.py

marketplace: splittable sku for MW02702 (PROJQUAY-8151) (#3389)

2025-01-09 09:37:09 -05:00

permission.py

db: use iterator chain for _get_user_repo_permissions (PROJQUAY-8839) (#3822)

2025-04-29 11:44:31 -04:00

proxy_cache.py

chore: drop deprecated tables and remove unused code (PROJQUAY-522) (#2089)

2023-08-25 12:17:24 -04:00

pull_statistics.py

pullstats: updated bulk upsert function to track correct pull count and timestamp in case of race condition (PROJQUAY-9684) (#4463)

2025-11-14 09:48:23 -05:00

quota.py

quota: refactor, tests, and optimizations (PROJQUAY-6735) (#2712)

2024-03-06 09:06:38 -05:00

release.py

chore: drop deprecated tables and remove unused code (PROJQUAY-522) (#2089)

2023-08-25 12:17:24 -04:00

repo_mirror.py

mirror: Add job timeout to mirror configurations (PROJQUAY-7249) (#3723)

2025-06-12 19:09:51 +02:00

repository.py

proxycache(permissions): CVE-2025-4374 (PROJQUAY-8892) (#3941)

2025-05-22 09:09:02 -04:00

repositoryactioncount.py

chore: drop deprecated tables and remove unused code (PROJQUAY-522) (#2089)

2023-08-25 12:17:24 -04:00

service_keys.py

chore: drop deprecated tables and remove unused code (PROJQUAY-522) (#2089)

2023-08-25 12:17:24 -04:00

sqlalchemybridge.py

chore: drop deprecated tables and remove unused code (PROJQUAY-522) (#2089)

2023-08-25 12:17:24 -04:00

storage.py

storage: prevent registry worker crash for large layers (PROJQUAY-7603) (#3123)

2024-08-09 11:32:33 -04:00

team.py

teamsync: peewee integrity error check on teamsync (PROJQUAY-7747) (#3550)

2025-01-09 15:40:01 -05:00

token.py

chore: drop deprecated tables and remove unused code (PROJQUAY-522) (#2089)

2023-08-25 12:17:24 -04:00

user.py

db: moving robot search and find repo to garbage collect queries to read replica (PROJQUAY-8792) (#3795)

2025-04-17 15:13:51 +00:00