insomnia

mirror of https://github.com/Kong/insomnia.git synced 2026-08-03 19:32:31 -04:00

Files

Kyle 92b25cbf2a fix(sandbox): re-verify response.getBodyBuffer against the id-resolved response, not the caller's bodyPath

assertResponseBodyPathReadOwnership only confirmed a supplied bodyPath
belonged to *some* persisted response, so a caller supplying a real
response id alongside a different, real response's bodyPath still read
that other response's body. When an id is supplied, re-load the response
server-side and read only its own bodyPath, ignoring the caller's;
fall back to the existing bodyPath-ownership check when no id is
available (the pre-persistence response-hook call site).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-25 21:26:23 -04:00

insomnia

fix(sandbox): re-verify response.getBodyBuffer against the id-resolved response, not the caller's bodyPath

2026-07-25 21:26:23 -04:00

insomnia-analytics

Bump app version to 13.1.0 (#10296 )

2026-07-24 09:50:49 +08:00

insomnia-api

Bump app version to 13.1.0 (#10296 )

2026-07-24 09:50:49 +08:00

insomnia-component-docs

Feat/basic components m0 (#10230 )