stroblme a168bcbdee Refuse names that are not names at the store boundary ...

DELETE /flows/%2e%2e reached FlowStore.delete_flow(".."), which removed
the data directory, and /flows/_lib removed every shared node. Every
path the flow and dashboard stores build from a flow, node, library or
dashboard name now goes through checked(), which raises InvalidName
(400) for anything _validate_name refuses. _validate_name uses
fullmatch, so a trailing newline is refused too.

2026-10-06 11:59:25 +02:00

..

routes

Refuse names that are not names at the store boundary

2026-10-06 11:59:25 +02:00

__init__.py

Vendor backend and frontend into the monorepo

2026-08-09 15:14:54 +02:00