Commit Graph

5 Commits

Author SHA1 Message Date
diegosouzapw
171081dbbb fix(core): harden input handling and compression cleanup
Replace regex-based compression artifact cleanup with linear helpers to
avoid pathological backtracking and normalize whitespace safely.
Tighten request and response parsing in assess, Gemini translation, and
executor telemetry to avoid unsafe property access and invalid category
filtering.

Also add managed database backup support for legacy encrypted
connection migration, improve SQLite load error handling, and cover the
regressions with unit tests.
2026-05-06 02:29:25 -03:00
diegosouzapw
72e31e6329 fix(security): resolve CodeQL polynomial regular expression (ReDoS) vulnerabilities and chatCore TS errors (#201, #200, #199) 2026-05-04 02:14:52 -03:00
diegosouzapw
476ef48fa5 test: avoid url substring assertion 2026-05-02 05:01:44 -03:00
diegosouzapw
4b9c129e1c fix: harden security scan findings 2026-05-02 04:51:38 -03:00
oyi77
b5f6bea880 feat(compression): implement caveman compression engine — Wave 1 complete
- CavemanConfig types and interfaces (types.ts)
- 30 compression rules across 4 categories (cavemanRules.ts)
- Core 5-step compression pipeline (caveman.ts)
- Code block / URL / path preservation (preservation.ts)
- Strategy selector with caveman dispatch (strategySelector.ts)
- Stats tracking module (stats.ts)
- DB settings module (compression.ts)
- Unit tests: 36 tests, 0 failures
- Typecheck: 0 errors, Lint: 0 errors

Implements: GitHub issue #1587 (Phase 2)
2026-04-27 18:31:46 +07:00