Classic298 386ac95814 fix: scope Socket.IO event-caller to the requesting user's own session (#25763) ... get_event_call() routed execute:python / execute:tool events to a client-supplied session_id after only checking the session was connected, not that it belonged to the requester. Verify the target session is owned by the requesting user (metadata user_id) before delivering, so a client cannot route code/tool execution into another user's session. Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-29 02:17:40 -05:00
..
main.py	fix: scope Socket.IO event-caller to the requesting user's own session (#25763)	2026-06-29 02:17:40 -05:00
utils.py	chore: format	2026-06-01 13:56:55 -07:00