Katia Bulatova dd90b6e968 fix(webapp): never render an image the agent's model authored ...

A remote image in model output fetches on render, so its URL is an exfiltration channel. No image is rendered at all, and the document CSP now names the hosts images may come from.

2026-08-06 09:42:43 +00:00

..

supervisor

fix(supervisor): hold the last backpressure verdict when a read fails (#4444)

2026-08-03 18:06:23 +02:00

webapp

fix(webapp): never render an image the agent's model authored

2026-08-06 09:42:43 +00:00