diegosouzapw 0efaf1cca7 fix(security): post-review hardening batch — command injection, CSP, auth gaps, error sanitization, resilience ...

- plugin.mjs: replace execSync string-template with spawnSync arg-array (command injection)
- electron/main.js: gate unsafe-eval on !app.isPackaged instead of URL substring; merge duplicate connect-src
- budget/bulk, resilience/reset: add requireManagementAuth guard
- gemini-web, claude-web, copilot-web executors: route catch-block messages through sanitizeErrorMessage
- oauth route, agents/tasks routes: route catch-block errors through sanitizeErrorMessage
- codex.ts: return null (not error-object) from refreshCredentials on failure
- tokenRefresh.ts: safe unknown-error access in catch block
- combo.ts: reset exhaustedProviders per set-retry iteration so providers get a second chance
- circuitBreaker.ts: persist and restore lastFailureKind via options JSON column

2026-05-20 11:11:13 -03:00

..

antigravity.ts

test: fix post-merge test breakages from #2227 #2233 #2238

2026-05-14 06:19:02 -03:00

azure-openai.ts

fix(security): resolve 14 CodeQL code scanning alerts

2026-04-27 20:00:10 -03:00

base.ts

Release/v3.8.0 (#2430)

2026-05-20 09:12:49 -03:00

blackbox-web.ts

fix(providers/blackbox-web): BLACKBOX_WEB_VALIDATED_TOKEN env override (#2252)

2026-05-14 13:00:15 -03:00

chatgpt-web.ts

fix(providers): resolve ChatGPT Web authentication failure by aligning TLS fingerprint User-Agent strings (#1925)

2026-05-04 02:03:10 -03:00

claude-web-auto-refresh.ts

feat(claude-web): implement session-based executor with auto-refresh (#2283)

2026-05-15 12:51:07 -03:00

claude-web-with-auto-refresh.ts

feat(claude-web): implement session-based executor with auto-refresh (#2283)

2026-05-15 12:51:07 -03:00

claude-web.ts

fix(security): post-review hardening batch — command injection, CSP, auth gaps, error sanitization, resilience

2026-05-20 11:11:13 -03:00

claudeIdentity.ts

security: fix code scanning alerts — sanitize error messages and suppress false-positive hash warnings

2026-05-10 10:41:16 -03:00

cliproxyapi.ts

fix(cliproxyapi): probe /v1/models for health (CPA 6.x has no /health) (#2189)

2026-05-12 19:50:07 -03:00

cloudflare-ai.ts

fix(build): unblock release build and settings state updates

2026-04-17 23:21:02 -03:00

codex.ts

fix(security): post-review hardening batch — command injection, CSP, auth gaps, error sanitization, resilience

2026-05-20 11:11:13 -03:00

commandCode.ts

fix(providers/command-code): send required stream payload (#2271)

2026-05-15 03:25:22 -03:00

copilot-web.ts

fix(security): post-review hardening batch — command injection, CSP, auth gaps, error sanitization, resilience

2026-05-20 11:11:13 -03:00

cursor.ts

fix(security): mask public upstream creds + centralize error sanitization

2026-05-14 10:38:13 -03:00

deepseek-web-with-auto-refresh.ts

feat(deepseek-web): full DeepSeek web API executor with PoW solver (#2295)

2026-05-16 00:27:56 -03:00

deepseek-web.ts

feat(deepseek-web): full DeepSeek web API executor with PoW solver (#2295)

2026-05-16 00:27:56 -03:00

default.ts

Release/v3.8.0 (#2430)

2026-05-20 09:12:49 -03:00

devin-cli.ts

feat(oauth): complete Windsurf / Devin CLI OAuth + API-token flows (#2168)

2026-05-11 21:49:32 -03:00

gemini-cli.ts

feat(T07): API Key health tracking with A3 guard, dashboard notification, and toast navigation fixes (#2412)

2026-05-19 09:50:51 -03:00

gemini-web.ts

fix(security): post-review hardening batch — command injection, CSP, auth gaps, error sanitization, resilience

2026-05-20 11:11:13 -03:00

github.ts

fix(providers): refresh web client user agents (#1699)

2026-04-28 02:41:19 -03:00

gitlab.ts

feat(providers): add GitLab Duo, NLP Cloud, and enterprise gateways

2026-04-24 07:00:21 -03:00

glm.ts

fix: harden stream readiness and build output (#2317)

2026-05-16 21:47:40 -03:00

grok-web.ts

fix(grok-web): stabilize tool calling and response parsing (#1857)

2026-05-01 16:11:32 -03:00

index.ts

Release/v3.8.0 — full changelog with 660+ commits (#2419)

2026-05-20 02:05:50 -03:00

kie.ts

fix: address kie provider review feedback

2026-05-07 00:01:54 +07:00

kiro.ts

fix(providers): strip OpenAI-specific fields in Kiro translator to prevent 400 errors (#2037)

2026-05-09 21:05:08 -03:00

muse-spark-web.ts

fix(providers): refresh web client user agents (#1699)

2026-04-28 02:41:19 -03:00

nlpcloud.ts

feat(providers): add GitLab Duo, NLP Cloud, and enterprise gateways

2026-04-24 07:00:21 -03:00

opencode.ts

fix(providers): refresh web client user agents (#1699)

2026-04-28 02:41:19 -03:00

perplexity-web.ts

fix(providers): refresh web client user agents (#1699)

2026-04-28 02:41:19 -03:00

petals.ts

fix(claude): preserve tool_result adjacency (#1555)

2026-04-24 09:22:46 -03:00

pollinations.ts

fix(providers): correct pollinations requests and provider dashboard state

2026-05-11 15:51:05 -03:00

puter.ts

feat(providers): adicionar provedor Puter AI com 500+ modelos

2026-03-22 20:29:06 -03:00

qoder.ts

feat(runtime): add hot-reloadable guardrails and model diagnostics

2026-04-17 11:56:52 -03:00

t3-chat-web.ts

Release/v3.8.0 — full changelog with 660+ commits (#2419)

2026-05-20 02:05:50 -03:00

veoaifree-web.ts

fix(security): sanitize error messages, fix ReDoS patterns, harden OAuth callback

2026-05-18 17:42:09 -03:00

vertex.ts

Refresh providers, model catalogs, and docs for v3.8.0 (#2088)

2026-05-10 00:00:11 -03:00

windsurf.ts

chore: tidy up deprecated models from windsurf provider (#2279)

2026-05-15 10:47:39 -03:00