MQL5-Google-Onedrive/.jules
google-labs-jules[bot] 9b6778cba0 Fix CRITICAL authorization bypass in Telegram Bot
- Changed `check_authorized` in `scripts/telegram_deploy_bot.py` to fail closed (deny all) if `TELEGRAM_ALLOWED_USER_IDS` is unset or empty.
- Updated `scripts/TELEGRAM_BOT_SETUP.md` and `QUICK_DEPLOY.md` to document that `TELEGRAM_ALLOWED_USER_IDS` is now mandatory for bot access.
- Added Sentinel Journal entry in `.jules/sentinel.md` documenting the vulnerability and learning.
- Verified fix with reproduction script.
2026-02-07 11:33:43 +00:00
..
bolt.md Bolt: Optimize market data fetching with bulk download 2026-01-26 05:13:57 +00:00
deploy.yml Merge feature branch, cleanup dependencies, and sanitize credentials 2026-01-28 10:24:13 +00:00
sentinel.md Fix CRITICAL authorization bypass in Telegram Bot 2026-02-07 11:33:43 +00:00