MoonsvnLyn 4f39bd4f35 fix(email): require exact authserv-id before trusting results ...

Trust only the topmost Authentication-Results field from the explicitly configured receiving MTA. Fail closed for allowlisted senders when no exact pin is configured, preventing injected or lower matching headers from authorizing a sender.

(cherry picked from commit e013fda3facc005e8f4d5f81e20c2d21aee698df)

2026-10-04 14:06:56 +05:30

..

browser

…

context_engine

feat(plugins): run third-party plugins in a per-profile plugin host (plugins.isolation: host)

2026-10-03 10:15:11 -07:00

cron_providers

feat(plugins): run third-party plugins in a per-profile plugin host (plugins.isolation: host)

2026-10-03 10:15:11 -07:00

dashboard_auth

…

disk-cleanup

…

google_meet

…

hermes-achievements

…

image_gen

…

kanban

…

memory

fix: plugin host review findings (async ctx, caller session, restarts, per-profile dashboard)

2026-10-03 10:15:11 -07:00

model-providers

…

observability/langfuse

…

platforms

fix(email): require exact authserv-id before trusting results

2026-10-04 14:06:56 +05:30

security-guidance

…

spotify

…

teams_pipeline

…

video_gen

…

web

refactor(web): drop the gate's leftovers and keep the tier rules tested

2026-10-04 00:10:54 +05:30

__init__.py

…

AGENTS.md

fix: a removed Home Assistant plugin stays removed after update and restart

2026-10-04 00:08:20 -07:00

plugin_loader.py

feat(plugins): run third-party plugins in a per-profile plugin host (plugins.isolation: host)

2026-10-03 10:15:11 -07:00

plugin_storage.py

…

plugin_utils.py

…