Skip to content

fix: missing Content-Type validation on JSON endpoints (Batch #63)#4153

Open
BossChaos wants to merge 2 commits intoScottcjn:mainfrom
BossChaos:sec-batch63
Open

fix: missing Content-Type validation on JSON endpoints (Batch #63)#4153
BossChaos wants to merge 2 commits intoScottcjn:mainfrom
BossChaos:sec-batch63

Conversation

@BossChaos
Copy link
Copy Markdown
Contributor

fix: missing Content-Type validation on JSON endpoints (Batch #63)

  • Replace get_json(force=True) with get_json(silent=True)
  • Enforce proper application/json Content-Type header requirement
  • Prevent CSRF attacks via non-JSON content types
  • Affects bridge_api.py, gpu_render_protocol.py, sophia_elya_service.py

Co-Authored-By: Hermes Agent hermes@nous.research

BossChaos and others added 2 commits May 5, 2026 02:52
…n#63)

- Replace get_json(force=True) with get_json(silent=True)
- Enforce proper application/json Content-Type header requirement
- Prevent CSRF attacks via non-JSON content types
- Affects bridge_api.py, gpu_render_protocol.py, sophia_elya_service.py

Co-Authored-By: Hermes Agent <hermes@nous.research>
@BossChaos BossChaos requested a review from Scottcjn as a code owner May 8, 2026 06:45
@github-actions github-actions Bot added BCOS-L1 Beacon Certified Open Source tier BCOS-L1 (required for non-doc PRs) node Node server related ci size/S PR: 11-50 lines labels May 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

BCOS-L1 Beacon Certified Open Source tier BCOS-L1 (required for non-doc PRs) ci node Node server related size/S PR: 11-50 lines

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant