Skip to content

Require consent before applying Requesty deep links - #2408

Open
coderabbitai[bot] wants to merge 1 commit into
mainfrom
coderabbit/secure-requesty-callback/e5a51fd7
Open

coderabbitai[bot] wants to merge 1 commit into
mainfrom
coderabbit/secure-requesty-callback/e5a51fd7

Conversation

@coderabbitai

@coderabbitai coderabbitai Bot commented Nov 10, 2026

Copy link
Copy Markdown
Contributor

Require explicit approval before external Requesty links replace active provider credentials. Show the destination URL and warn that subsequent requests can send conversation and workspace content there. Leave credentials unchanged when users dismiss or cancel the dialog.

Add regression tests for approval, cancellation, delayed consent, and the default destination. Preserve callback parsing and missing base URL behavior. This change supports reliability.

Validation: Tests were not run during this metadata inspection.

View coding task

@coderabbitai

coderabbitai Bot commented Nov 10, 2026 •

Copy link
Copy Markdown
Contributor Author

Important

Review skipped

This PR was authored by the user configured for CodeRabbit reviews. CodeRabbit does not review PRs authored by this user. It's recommended to use a dedicated user account to post CodeRabbit review feedback.

Run configuration

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

@github-actions

github-actions Bot commented Nov 10, 2026 •

Copy link
Copy Markdown
Contributor

Review status

This PR was opened by an automated account. A human maintainer must verify the change intent, provenance, and validation before merging.

Current step: Awaiting fresh human maintainer or CODEOWNER approval.

Review-state labels are managed by this workflow; do not edit them manually. community-approved is managed the same way — do not add or remove it manually. It signals a fresh community code approval for the current head as an advisory priority only; maintainer review is still required.

@codecov

codecov Bot commented Nov 10, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@github-actions github-actions Bot added the awaiting-maintainer CodeRabbit approved; waiting for a human maintainer label Nov 10, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

awaiting-maintainer CodeRabbit approved; waiting for a human maintainer

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants