nesquena-hermes 9a5435176d fix: broaden session ID validator to support new hermes-agent format (#212) ...

* fix: broaden session ID validator to support new hermes-agent format

* test: add more path traversal evil IDs to session validator test

Add null byte, backslash, forward slash, and dot-extension variants
to the rejected session ID test to cover additional attack vectors.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Nathan Esquenazi <nesquena@gmail.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-10 00:00:02 -07:00

..

__init__.py

Hermes WebUI v0.1.0 — initial public release

2026-03-30 20:40:19 -07:00

conftest.py

fix: auto-skip agent-dependent tests when hermes-agent not installed (#86)

2026-04-04 14:51:15 -07:00

test_approval_unblock.py

fix: surface approval prompt in UI instead of getting stuck in Thinking (#187)

2026-04-08 20:16:22 -07:00

test_auth_sessions.py

fix(auth): prune expired sessions on every verify to prevent memory leak (#196)

2026-04-09 18:05:23 -07:00

test_model_resolver.py

fix: do not build phantom Custom group when active provider is set (#206)

2026-04-09 18:33:24 -07:00

test_regressions.py

fix: stop leaking stack traces to clients in HTTP 500 responses

2026-04-03 06:41:32 -07:00

test_sprint1.py

Hermes Web UI — Sprints 11-14: multi-provider models, settings, session QoL, alerts, polish

2026-03-31 07:02:47 +00:00

test_sprint2.py

Hermes WebUI v0.1.0 — initial public release

2026-03-30 20:40:19 -07:00

test_sprint3.py

Hermes WebUI v0.1.0 — initial public release

2026-03-30 20:40:19 -07:00

test_sprint4.py

Hermes WebUI v0.1.0 — initial public release

2026-03-30 20:40:19 -07:00

test_sprint5.py

Hermes WebUI v0.1.0 — initial public release

2026-03-30 20:40:19 -07:00

test_sprint6.py

Hermes WebUI v0.1.0 — initial public release

2026-03-30 20:40:19 -07:00

test_sprint7.py

Hermes WebUI v0.1.0 — initial public release

2026-03-30 20:40:19 -07:00

test_sprint8.py

Hermes WebUI v0.1.0 — initial public release

2026-03-30 20:40:19 -07:00

test_sprint9.py

Hermes WebUI v0.1.0 — initial public release

2026-03-30 20:40:19 -07:00

test_sprint10.py

Hermes WebUI v0.1.0 — initial public release

2026-03-30 20:40:19 -07:00

test_sprint11.py

Hermes Web UI — Sprints 11-14: multi-provider models, settings, session QoL, alerts, polish

2026-03-31 07:02:47 +00:00

test_sprint12.py

Hermes Web UI — Sprints 11-14: multi-provider models, settings, session QoL, alerts, polish

2026-03-31 07:02:47 +00:00

test_sprint13.py

Hermes Web UI — Sprints 11-14: multi-provider models, settings, session QoL, alerts, polish

2026-03-31 07:02:47 +00:00

test_sprint14.py

Hermes Web UI — Sprints 11-14: multi-provider models, settings, session QoL, alerts, polish

2026-03-31 07:02:47 +00:00

test_sprint15.py

feat: Sprint 15 — session projects, code copy button, tool card toggle

2026-04-02 00:11:49 -07:00

test_sprint16.py

feat: safe HTML rendering in AI responses + active session gold style + Sprint 16 tests

2026-04-03 00:27:43 +00:00

test_sprint17.py

feat: Sprint 17 -- workspace breadcrumbs, slash commands, send key setting

2026-04-03 04:13:38 -07:00

test_sprint19.py

fix(auth): harden password_hash handling in settings API

2026-04-03 06:21:04 -07:00

test_sprint20.py

feat: pluggable i18n with English/Chinese language switcher in Settings

2026-04-08 18:57:50 -07:00

test_sprint20b.py

fix: test_send_pop_in keyframe parser hit wrong @keyframes block

2026-04-03 14:23:56 +00:00

test_sprint23.py

fix: test hardening for sprint 23 — handle missing cron/skills modules in test env

2026-04-03 19:16:17 -07:00

test_sprint26.py

fix: settings unsaved-changes guard, add Slate theme, improve Light theme

2026-04-05 04:00:24 +00:00

test_sprint27.py

fix: harden bot_name — crash guard, XSS escape, sanitization, tests

2026-04-06 15:06:16 +00:00

test_sprint28.py

fix: personalities from config.yaml + ephemeral_system_prompt (#139) (#148)

2026-04-06 14:10:30 -07:00

test_sprint29.py

fix: broaden session ID validator to support new hermes-agent format (#212)

2026-04-10 00:00:02 -07:00

test_sprint30.py

fix: surface approval prompt in UI instead of getting stuck in Thinking (#187)

2026-04-08 20:16:22 -07:00

test_tls_support.py

feat: optional HTTPS/TLS support via cert and key env vars (#199)

2026-04-09 18:08:29 -07:00