fix(security): P1 audit fixes - Oracle identifier quoting, env credential gates, /health and OTel hardening by FabioLeitao · Pull Request #2107 · DataBoar/data-boar

fix(security): quote non-simple Oracle catalog identifiers (Closes #2094)

FabioLeitao

committed

734065e

fix(security): fail closed on non-REST pass_from_env names (Closes #2086)

FabioLeitao

committed

a50cb02

fix(security): restrict notification env interpolation (Closes #2087)

FabioLeitao

committed

6e01f20

fix(security): stop scan webhooks from following redirects (Closes #2088)

FabioLeitao

committed

8d1109b

fix(security): make the non-REST credential gate satisfiable per connector (Refs #2086)

FabioLeitao

committed

51c5d83

docs: migrate shipped examples and document the credential env gate (Refs #2086, #2087)

FabioLeitao

committed

1e97d20

fix(security): disable FastAPI native OTel auto-config (Refs #2089)

FabioLeitao

committed

e807dc7

fix(security): keep unauthenticated /health to a liveness body (Refs #2077)

FabioLeitao

committed

adb5e3f

fix(security): stop consumers reading posture from /health (Refs #2077)

FabioLeitao

committed

9c47f2a

fix(security): require fastapi>=0.143.0 so OTel auto-config is opt-in (Closes #2089)

FabioLeitao

committed

946cecb

docs: prefix the remaining commented *_from_env examples (Refs #2086)

FabioLeitao

committed

44cbcb7

fix(security): require every credential destination in allowed_hosts (Refs #2086)

FabioLeitao

committed

f40c697

Navigation Menu

Repository navigation

fix(security): P1 audit fixes - Oracle identifier quoting, env credential gates, /health and OTel hardening - #2107

fix(security): P1 audit fixes - Oracle identifier quoting, env credential gates, /health and OTel hardening#2107
FabioLeitao merged 12 commits into
mainfrom
epic/security-zero-2026-10-19

Commits on Oct 19, 2026

fix(security): quote non-simple Oracle catalog identifiers (Closes #2094)

fix(security): fail closed on non-REST pass_from_env names (Closes #2086)

fix(security): restrict notification env interpolation (Closes #2087)

fix(security): stop scan webhooks from following redirects (Closes #2088)

fix(security): make the non-REST credential gate satisfiable per connector (Refs #2086)

docs: migrate shipped examples and document the credential env gate (Refs #2086, #2087)

fix(security): disable FastAPI native OTel auto-config (Refs #2089)

fix(security): keep unauthenticated /health to a liveness body (Refs #2077)

fix(security): stop consumers reading posture from /health (Refs #2077)

fix(security): require fastapi>=0.143.0 so OTel auto-config is opt-in (Closes #2089)

docs: prefix the remaining commented *_from_env examples (Refs #2086)

fix(security): require every credential destination in allowed_hosts (Refs #2086)