mirror of
https://github.com/Kong/insomnia.git
synced 2026-09-17 18:43:35 -04:00
* fix: limit cookie template rendering to manually-set cookies and narrow template file access * fix: only expand nested templates for variable substitution, not direct tag output * test: cover OAuth2 access token exposure via the request tag for nested-template regression * sec: exclude response-sourced cookies from WebSocket/Socket.IO connect rendering * test: fix mTLS/cert smoke tests relying on secure-read-file path-prefix bug * test: scope mtls smoke test locator to avoid strict-mode collision * sec: close hard-link bypass of reserved NeDB database file check * fix: avoid doubled path separator when allowlisted folder is a filesystem root