scriptoriumadmin/Roo-Code
1
0
Fork 0
mirror of https://github.com/RooVetGit/Roo-Code.git synced 2026-08-28 05:27:24 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
Roo-Code/packages
History
Exact
Roo Code d6426a6af4 fix: add user ID validation to prevent cross-user task data access 
- Add userId to TaskChannel for ownership validation
- Include userId in task JOIN requests for server-side validation
- Pass userId from BridgeOrchestrator to TaskChannel
- Add comment about server-side validation in CloudAPI
- Add comprehensive tests for user isolation

This fix ensures that users can only access their own tasks, preventing
the security issue where one user could see another user's task data.

Fixes #7932
2025-09-12 08:56:06 +00:00
..
build Sharing improvements (#5082) 2025-06-24 16:36:32 -04:00
cloud fix: add user ID validation to prevent cross-user task data access 2025-09-12 08:56:06 +00:00
config-eslint Upgrade to ESLint 9 + share eslint config across workspaces (#3815) 2025-05-21 21:30:21 -07:00
config-typescript Move @roo-code/cloud to the Roo-Code repo (#7503) 2025-08-28 11:18:45 -07:00
evals Add model info to eval runs table (#7749) 2025-09-06 22:10:08 -07:00
ipc Add an API for resuming tasks by ID (#7122) 2025-08-15 12:03:58 -04:00
telemetry Make Posthog telemetry the default (#7909) 2025-09-11 15:50:40 -04:00
types Make Posthog telemetry the default (#7909) 2025-09-11 15:50:40 -04:00