Sanjay Santhanam 7e4d2ee419 fix(api): repair filament rows already stored with a leading # ...

The validator fix only guards the write path. Instances that already hit #780
keep 500ing on GET /filament because the stored value exceeds the response
model's max_length, and the UI can't repair what it can't list.

Filament.from_db now strips the # and returns None when the stored value still
isn't a valid 6/8 character code, so a single bad row no longer takes down the
whole list. A migration chained from 415a8f855e14 rewrites existing rows one by
one through op.get_bind() rather than with SQL string functions, so it behaves
the same on sqlite, postgres, mysql and cockroachdb. downgrade() is a no-op.

2026-08-02 00:22:27 -07:00

..

__init__.py

security: add shared origin-trust helper

2026-07-27 08:51:11 +02:00

conftest.py

Test config.js rendering without importing main

2026-07-31 10:00:47 +02:00

test_backup_rotation.py

security: stop backup rotation from churning away the restore history

2026-07-27 19:33:07 +02:00

test_color_hex_validation.py

fix(api): repair filament rows already stored with a leading #

2026-08-02 00:22:27 -07:00

test_configjs.py

Test config.js rendering without importing main

2026-07-31 10:00:47 +02:00

test_env.py

security: add shared origin-trust helper

2026-07-27 08:51:11 +02:00

test_export.py

security: escape CSV formulas and bound extra-field sizes

2026-07-27 19:58:52 +02:00

test_extra_field_registry.py

security: escape CSV formulas and bound extra-field sizes

2026-07-27 19:58:52 +02:00

test_host_validation.py

security: make the host guard opt-in

2026-07-31 09:36:41 +02:00

test_like_escaping.py

security: finish the audit's low-severity items

2026-07-31 09:42:32 +02:00

test_security.py

security: drop CORS credentials under a wildcard origin, document the model

2026-07-27 19:36:47 +02:00

test_sort_parsing.py

fix: return 400 instead of 500 for malformed sort parameters

2026-07-27 20:03:14 +02:00