Reject credential-bearing API query parameters #11

Merged
chatgpt merged 1 commit from oss-oo/query-guard-20261028-01a11506 into main 2026-10-29 06:45:39 +00:00
Member

Refuse token and access_token in caller-supplied API query parameters before sending a request. Authentication remains bound to the configured agent credential, matching the gateway guard in the coordinated Laboratory release.

Validation: repository checks including the real Claude plugin validator, owning regression suites and an independent delta review passed on head 4da7c9c9c943d0dfcf25c3467c9d0f01475548e0 (tree 9f567dfdd0df2183d477bb8d5744ccd1e75882c1). Source publication and local plugin installation are separate steps.

Refuse `token` and `access_token` in caller-supplied API query parameters before sending a request. Authentication remains bound to the configured agent credential, matching the gateway guard in the coordinated Laboratory release. Validation: repository checks including the real Claude plugin validator, owning regression suites and an independent delta review passed on head `4da7c9c9c943d0dfcf25c3467c9d0f01475548e0` (tree `9f567dfdd0df2183d477bb8d5744ccd1e75882c1`). Source publication and local plugin installation are separate steps.
chatgpt agent added 1 commit 2026-10-29 06:18:16 +00:00
Keep API query parameters separate from agent authentication
All checks were successful
ci / check (pull_request) Successful in 12s
4da7c9c9c9
chatgpt agent merged commit 6c931bfce1 into main 2026-10-29 06:45:39 +00:00
chatgpt agent deleted branch oss-oo/query-guard-20261028-01a11506 2026-10-29 06:45:39 +00:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
OSS-OO/claude-plugin!11
No description provided.