matevip 2e3dd071a5 fix(kb-open): assert session belongs to path kbId + cleanup ... - requireSessionOwnership now also checks session.kbId() == path kbId (404 on mismatch), so a research session started under one KB cannot be addressed via another KB path even when the caller's key is bound to both — defense-in-depth on top of the keyId ownership check. - Drop internal "R7" / "review #446" markers from the controller Javadoc in favour of functional wording. - Import Set/Map/concurrent types and static any() instead of inline FQNs in the new kb-open research/auth tests, per code style.		2026-07-02 17:52:25 +08:00
..
src	fix(kb-open): assert session belongs to path kbId + cleanup	2026-07-02 17:52:25 +08:00
Dockerfile	fix(docker): honor SPRING_PROFILES_ACTIVE instead of pinning the mysql profile	2026-06-14 16:47:16 +08:00
pom.xml	fix(db): make KingbaseES driver opt-in and restore default SSRF guard	2026-06-14 10:34:35 +08:00
settings.xml	build(maven): declare US + CN repositories in pom.xml, drop opaque mirror	2026-04-25 09:56:17 +08:00