Security context

Highlights

Auth Bypass: 2 prior fixes. Scrutinize any change in this area.

src/handler/fetch/fetch.go: most-fixed (1 issue). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Command Injection: Direct, unvalidated execution of system commands or client binaries during DML execution allows arbitrary command injection. Developers must use type-safe selection handlers and avoid direct shell execution with user-controlled input payloads.

Auth Bypass: SQL testing and WebSocket-based query endpoints bypassed authorization checks, allowing unauthorized database interactions. All data retrieval and testing handlers must explicitly invoke source control permission validations prior to execution.

Auth Bypass: Incomplete permission validation within the query review mode allowed users to escalate privileges and access unauthorized queries, requiring explicit role and state-based access controls.