Disclosure history asks the list's source filter, so a REPORT ref or a Message-ID with a slash opens instead of a 400 (KamoCollab CP08 final fix)

Shipped

October 12, 2026 at 9:20 AM UTC

Author

Kamo

Commit

b51fb47

The dialog put the record id in /source/{kind}/{id}. An id with a '/' (every REPORT ref, a GitHub or GitLab notification's root Message-ID) travels as %2F, which Tomcat and Spring Security refuse before the controller runs. It now asks GET **************** the same ix_odes_source read, the same VIEW_ACCESS_LOGS check and the same canonicalization.