imbajin opened a new pull request, #358: URL: https://github.com/apache/hugegraph-ai/pull/358
## Short Summary - fix CS-001 admin log path traversal and insecure default token access - fix client error contracts for sensitive logging, malformed successful responses, and Gremlin exception propagation - fix graph import typed-value preservation and request-scoped config/provider validation - replace fake integration tests with production flow/operator smoke coverage ## Full Summary by CR ### **Bug Fixes** * Enhance logging and error handling: Prevent path traversal, improve exception observability, and introduce more precise error types. * Mask request/response logs to reduce the risk of sensitive information leakage. * Prevent global configurations from leaking or interfering with each other during concurrent requests. ### New Features * Restrict and validate supported LLM and reranker provider types. * Strengthen input validation and controlled log access for management interfaces. ### **Documentation** * Add a complete code scanning plan, checkpoints, and final report documentation. ### **Tests** * Expand and adjust unit/integration tests to cover security, configuration isolation, and exception paths. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
