scriptoriumadmin/Roo-Code
1
0
Fork 0
mirror of https://github.com/RooVetGit/Roo-Code.git synced 2026-08-28 05:27:24 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
Roo-Code/packages/cloud
History
Roo Code d6426a6af4 fix: add user ID validation to prevent cross-user task data access 
- Add userId to TaskChannel for ownership validation
- Include userId in task JOIN requests for server-side validation
- Pass userId from BridgeOrchestrator to TaskChannel
- Add comment about server-side validation in CloudAPI
- Add comprehensive tests for user isolation

This fix ensures that users can only access their own tasks, preventing
the security issue where one user could see another user's task data.

Fixes #7932
2025-09-12 08:56:06 +00:00
..
src fix: add user ID validation to prevent cross-user task data access 2025-09-12 08:56:06 +00:00
eslint.config.mjs Move @roo-code/cloud to the Roo-Code repo (#7503) 2025-08-28 11:18:45 -07:00
package.json Move @roo-code/cloud to the Roo-Code repo (#7503) 2025-08-28 11:18:45 -07:00
tsconfig.json Move @roo-code/cloud to the Roo-Code repo (#7503) 2025-08-28 11:18:45 -07:00
vitest.config.ts Move @roo-code/cloud to the Roo-Code repo (#7503) 2025-08-28 11:18:45 -07:00