04/26 Enhanced app and extension security

2026-04-26 09:25:13 -04:00
parent ac91ea1fcc
commit cdda47872a
10 changed files with 378 additions and 37 deletions
@@ -33,6 +33,9 @@ def create_item():
    iv = data.get('iv', '')
    folder_id = data.get('folder_id')

+    enc_name = data.get('enc_name', '')
+    iv_name = data.get('iv_name', '')
+
    if not name:
        return jsonify({'error': 'name is required'}), 400
    if item_type not in VALID_TYPES:
@@ -47,6 +50,8 @@ def create_item():
        name=name,
        enc_data=enc_data,
        iv=iv,
+        enc_name=enc_name or None,
+        iv_name=iv_name or None,
    )
    try:
        db.session.add(item)
@@ -94,6 +99,10 @@ def update_item(item_id):
        item.enc_data = data['enc_data']
    if 'iv' in data:
        item.iv = data['iv']
+    if 'enc_name' in data:
+        item.enc_name = data['enc_name'] or None
+    if 'iv_name' in data:
+        item.iv_name = data['iv_name'] or None

    db.session.flush()
    AuditLog.log(