Devin AI 4986d75740 fix(security): use negative lookahead for CALL allowlist, remove dead CALL\s*\{ branch ... - Replace two-regex CALL check with single negative-lookahead CYPHER_CALL_DISALLOWED_RE = /\bCALL\s+(?!db\.|apoc\.meta\.)/i This correctly blocks queries containing ANY disallowed CALL target, even when bundled alongside an allowed CALL db.* or CALL apoc.meta.*. - Remove dead CALL\s*\{ alternative from CYPHER_WRITE_RE — the trailing \b never matched because { is a non-word character. - Both copies updated identically. Co-Authored-By: Allaun Silverfox <bigdataiscoming+9i37y6j2@protonmail.com>		2026-06-15 00:47:53 +00:00
..
ene	Fix external repository references	2026-05-05 21:15:26 -05:00
topological-engine	fix(security): use negative lookahead for CALL allowlist, remove dead CALL\s*\{ branch	2026-06-15 00:47:53 +00:00