Skip to content

fix(adapters): harden webhook tenant isolation - #877

Merged
dancer merged 5 commits into
mainfrom
fix/security-webhook-tenancy
Sep 3, 2026
Merged

fix(adapters): harden webhook tenant isolation#877
dancer merged 5 commits into
mainfrom
fix/security-webhook-tenancy

Conversation

@bensabic

Copy link
Copy Markdown
Collaborator

Multi-workspace Slack now ignores commands and interactions when their installation cannot be found, and channel names stay isolated per workspace.

Google Chat no longer learns its identity from incoming mentions, and forward history reads use bounded native pagination.

Webhook logs avoid message content. The example app protects preview routing, records only successful verified deliveries, and caps recording size and retention.

Signed-off-by: Ben Sabic <bensabic@users.noreply.github.com>
@bensabic
bensabic requested a review from a team as a code owner August 31, 2026 06:01
@vercel

vercel Bot commented Aug 31, 2026

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
chat Ready Ready Preview, v0 Sep 3, 2026 4:22pm UTC
chat-sdk-nextjs-chat Ready Ready Preview, v0 Sep 3, 2026 4:22pm UTC

Signed-off-by: dancer <josh@afterima.ge>
Signed-off-by: dancer <josh@afterima.ge>
Signed-off-by: dancer <josh@afterima.ge>
Comment thread pnpm-lock.yaml Outdated
Signed-off-by: dancer <josh@afterima.ge>
@dancer
dancer disabled auto-merge September 3, 2026 16:30
@dancer
dancer merged commit f485255 into main Sep 3, 2026
19 checks passed
@dancer
dancer deleted the fix/security-webhook-tenancy branch September 3, 2026 16:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants