# fix\(todo-gate\): refuse redirects, bound reads and git probes \(\#368\) · lucenx/codexbar-plasma

[View on GitCafe](https://git.cafe/lucenx/codexbar-plasma/commit/ab12fc8cf001c27d7c51a2345d344598b58e768f)

Repository: [lucenx/codexbar-plasma](https://git.cafe/lucenx/codexbar-plasma)

Visibility: public

Requested revision: ab12fc8cf001c27d7c51a2345d344598b58e768f

Requested commit: ab12fc8cf001c27d7c51a2345d344598b58e768f

Commit: ab12fc8cf001c27d7c51a2345d344598b58e768f

Tree: 4293a340b944e9787df9e4965d55f31e8f9e2ade

Author: Simone

Committer: GitHub

## Message

```
fix(todo-gate): refuse redirects, bound reads and git probes (#368)

The Decisions request followed redirects with the Authorization header, so
a 302 carried the API key to the redirect target and its body was accepted
as the verdict. Refuse redirects like the AI Insights helper, cap the
response at 64 KiB, and bound the git probes with a 120s timeout (a timeout
now skips the gate instead of crashing it).
```

## Parents

- [6e93105bdab859b335b55ff4fe3cffdc28a45bf8](https://git.cafe/lucenx/codexbar-plasma/commit/6e93105bdab859b335b55ff4fe3cffdc28a45bf8?format=markdown)

[Source at this commit](https://git.cafe/lucenx/codexbar-plasma/tree/ab12fc8cf001c27d7c51a2345d344598b58e768f?format=markdown)