Hive Hive
Sign in
Overview
Projects
Domains
Forage
Flights
Specs
Postmortems
Drops

fix(security): harden external input handling

GitHub issue · Closed

Metadata
Source
tuist/hive #61
Updated
Jun 24, 2026
Domains
Hive
Details

Summary

  • Harden external payload normalization for domain webhooks and drops by replacing arbitrary string-to-atom conversion with explicit key whitelists.
  • Normalize malformed OAuth registration metadata safely and prune stale OAuth registration rate-limit buckets.
  • Share XML escaping/rendering helpers across Atom and RSS feeds, and centralize comma-separated query parsing.
  • Codify the review learnings in the Blick Hive Elixir review skill.

Testing

  • mix compile --warnings-as-errors
  • mix test
  • mix credo
  • mix hex.audit
  • git diff --check
Flights

Investigate, reproduce, or fix this item in an isolated repository. Each Flight preserves its outcome and agent session.

New Flights are paused Configure model inference, GitHub, and a sandbox provider to start another Flight. Existing results remain available below.
No Flights yet

Start a Flight and preserve its objective, outcome, and session here.

Comments

No GitHub comments yet.