4955ac5

Fix 3 MEDIUM audit findings: (7) rate limiting on worklog create; (9) remove is_root from MCP user tool schemas; (10) explicit select in ApiClientRepository::findKeyByPublicId to exclude key_hash

2026-07-13T15:11:53+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files6

Core0

Module0

Forbidden0

Files

api/controller/mcp/McpController.php (api)
api/controller/worklog/WorklogController.php (api)
api/model/apiclient/ApiClientRepository.php (api)
api/controller/mcp/McpController.php (api)
api/controller/worklog/WorklogController.php (api)
api/model/apiclient/ApiClientRepository.php (api)