Dhananjay Maurya
bae174766b
Neutralise formula prefixes in CSV log exports
...
generateCSV escaped quotes only when a value happened to contain a comma and never neutralised formula prefixes, so every CSV log export could emit attacker controlled cells that execute when an admin opens the file. actor is a virtual API key name validated as nothing more than a non-empty string, and path, host, originalRequestURL, metadata and the AI session bodies come straight from the client request.
Each value now goes through a single encoder that collapses CR, LF and CRLF to a literal \n so a record can never be split across rows, prefixes a leading apostrophe when the first character would make a spreadsheet evaluate the cell as a formula, and quotes whenever the field contains a comma or a quote instead of only when it contains a comma. Headers use the same encoder so a column name cannot desynchronise the rows from the header row.
The five CSV export endpoints also declare charset=utf-8, matching the content type already used by the log streaming destination.
Fixes #3864
2026-10-08 14:43:43 +05:30
Owen Schwartz
c7222b67b9
Merge pull request #3591 from shleeable/patch-5
...
Typo: Update exportConnectionAuditLog.ts to use MAX_EXPORT_LIMIT
2026-09-21 14:33:22 -04:00
Owen
c6c443f0e0
Remove optional before prefault for zod v4
2026-09-15 10:25:21 -04:00
Fred KISSIE
4ddf36ebcc
💄 some last UI fixes
2026-08-24 20:39:30 +02:00
Fred KISSIE
6a5ecab013
✨ Implement IP filtering for admin access logs
2026-08-21 22:49:45 +02:00
Shlee
4bf5efdab5
Update exportConnectionAuditLog.ts
2026-08-16 21:34:35 +09:30
Owen
ccabddc225
Add logging for access for new public resources
2026-06-29 18:05:29 -04:00
Owen
c85a7f6ac5
Migrate unkown openapi response from string to {}
2026-06-09 15:35:08 -07:00
ebe1c7a297
Improve OpenAPI response payload typing for Swagger data schemas ( #3102 )
...
* Fix custom parser OpenAPI types and add structured default response schema
Agent-Logs-Url: https://github.com/fosrl/pangolin/sessions/73990123-9c27-444b-bc6e-77e890a0d57c
Co-authored-by: oschwartz10612 <4999704+oschwartz10612@users.noreply.github.com >
* Document all registerPath responses and normalize OpenAPI parser schemas
Agent-Logs-Url: https://github.com/fosrl/pangolin/sessions/73990123-9c27-444b-bc6e-77e890a0d57c
Co-authored-by: oschwartz10612 <4999704+oschwartz10612@users.noreply.github.com >
* Add concrete OpenAPI data schemas for selected routes
Agent-Logs-Url: https://github.com/fosrl/pangolin/sessions/7b395a8e-7fae-4f4d-952e-4030fea08262
Co-authored-by: oschwartz10612 <4999704+oschwartz10612@users.noreply.github.com >
* Reformat generated OpenAPI response schemas for readability
Agent-Logs-Url: https://github.com/fosrl/pangolin/sessions/7b395a8e-7fae-4f4d-952e-4030fea08262
Co-authored-by: oschwartz10612 <4999704+oschwartz10612@users.noreply.github.com >
* Remove obsolete stoi import from blueprint OpenAPI route
Agent-Logs-Url: https://github.com/fosrl/pangolin/sessions/7b395a8e-7fae-4f4d-952e-4030fea08262
Co-authored-by: oschwartz10612 <4999704+oschwartz10612@users.noreply.github.com >
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: oschwartz10612 <4999704+oschwartz10612@users.noreply.github.com >
2026-05-31 11:10:38 -07:00
Aditya kumar singh
73e9e830c3
Sort resource filter options in audit logs
2026-05-20 11:13:50 +05:30
copilot-swe-agent[bot] and oschwartz10612
a0a093ed0b
Document all registerPath responses and normalize OpenAPI parser schemas
...
Agent-Logs-Url: https://github.com/fosrl/pangolin/sessions/73990123-9c27-444b-bc6e-77e890a0d57c
Co-authored-by: oschwartz10612 <4999704+oschwartz10612@users.noreply.github.com >
2026-05-17 06:43:10 +00:00
Owen
114486608e
Add client endpoint to network log
2026-05-08 17:04:58 -07:00
Owen
aa95e5bb86
Update year
2026-04-15 14:41:13 -07:00
Owen
04943fb4a6
Fix access log
2026-03-30 11:58:48 -07:00
Owen
2c6e9507b5
Connection log page working
2026-03-23 21:41:53 -07:00
Owen
6471571bc6
Add ui for connection logs
2026-03-23 20:18:03 -07:00
miloschwartz
4cab693cfc
openapi and swagger ui improvements and cleanup
2026-03-03 14:54:17 -08:00
Owen
b8a364af6a
Fix log query
2026-02-23 22:01:11 -08:00
Owen
b622aca221
Try to route logs requests to a different database
2026-02-20 17:20:01 -08:00
depado
16653dd524
fix(database): filter dates evaluated at module load time
2025-12-18 10:06:31 -05:00
miloschwartz
f81909489a
add client telmetry and fix missing openapi on prefault
2025-12-11 10:38:48 -05:00
Fred KISSIE
f9c0e0ec3d
💬 updated text
2025-12-10 03:56:08 +01:00
Fred KISSIE
5b620469c7
♻️ set export logs limits to 50 000 everywhere
2025-12-10 03:42:53 +01:00
Fred KISSIE
df4b9de334
🚧 wip: export limits
2025-12-10 03:24:32 +01:00
Fred KISSIE
d490cab48c
Merge dev into fix/log-analytics-adjustments
2025-12-10 03:19:14 +01:00
Fred KISSIE
9db2feff77
♻️ set default time to 7 days ago in API too
2025-12-09 00:17:34 +01:00
miloschwartz
02fbc279b5
add email consent and update audience
2025-11-17 20:37:24 -05:00
Lokowitz
5d2f65daa9
fix for zod
2025-11-17 13:23:30 +00:00
Lokowitz
7db99a7dd5
used zod codemod
2025-11-16 14:18:17 +00:00
Owen
ebd99f95a3
Also order by id
2025-10-29 17:37:29 -07:00
Owen
c6f7be40df
Sort by descending
2025-10-29 16:16:25 -07:00
Owen
921285e5b1
Filtering on all tables
2025-10-23 15:33:29 -07:00
Owen
264bf46798
Filtering working on both access and request
2025-10-23 14:34:56 -07:00
Owen
eae2c37388
Add expandable columns
2025-10-22 18:21:54 -07:00
Owen
0211f75cb6
Access logs working
2025-10-22 17:42:27 -07:00
Owen
f748c5dbe4
Basic request log working
2025-10-22 12:23:48 -07:00
Owen
1142d6ac48
Date picker working
2025-10-21 20:15:43 -07:00
Owen
bdc3b2425b
Basic table working
2025-10-21 17:35:13 -07:00
Owen
9a64f45815
Basic log table there
2025-10-21 15:26:03 -07:00
Owen
1ee52ad86b
Add headers
2025-10-19 21:59:51 -07:00
Owen
1f50bc3752
Add logActionAudit and query endpoint
2025-10-19 21:53:00 -07:00
Dhananjay Maurya