fix(notifications): require a valid code, and escape the upstream path - #91

Merged

feruzm merged 4 commits into

mainfrom

fix/notifications-auth-and-path-escaping

Sep 1, 2026

Commits on Sep 1, 2026

fix(notifications): require a valid code, and escape the upstream path
ecency
committed
c232454
Downgrade a cross-account notifications view to scope=public
ecency
committed
da4c67d
Invert the flag: ask for scope=full on a self-view, not scope=public
ecency
committed
f30cef0
Present the enotify secret, and make the authorization decision testable
ecency
committed
1420aec