diegosouzapw 5a61ae9a98 feat(authz): allow LOCAL_ONLY paths from private-LAN peer IPs (owner-authorized) ...

Services + Traffic-Inspector (LOCAL_ONLY, spawn-capable) returned 403 when the
dashboard was reached via the LAN IP (192.168.0.x) instead of loopback. Add
isPrivateLanHost (RFC1918 IPv4 + IPv6 ULA/link-local) and widen ONLY the
local-only PATH gate to accept private-LAN socket peer IPs — based on the real
socket peer address (not the spoofable Host header), so public-internet clients
present public IPs and stay blocked. The CLI-token gate stays strictly loopback;
paths remain LOCAL_ONLY-classified (Hard Rules 15/17 unchanged). Enforcement-layer
carve-out for a LAN-deployed instance, authorized by the operator.

2026-05-30 17:26:10 -03:00

..

benchmarks

Release v3.8.2 (#2503)

2026-05-23 01:46:59 -03:00

e2e

Merge release/v3.8.8 into refactor/pages-v3-C (Playground + Search Tools Studio — plans 17+18)

2026-05-30 04:19:49 -03:00

fixtures/cursor

refactor(scripts): organize into build/dev/check/docs/i18n/ad-hoc subfolders

2026-05-13 10:14:25 -03:00

golden-set

feat(compression): expand caveman parity and MCP metadata compression

2026-05-03 09:14:20 -03:00

helpers

feat(auth): enforce dashboard sessions for management routes

2026-04-17 16:45:27 -03:00

integration

chore: remove audit logs tab from logs page

2026-05-30 09:11:17 -03:00

live

fix(security): resolve CodeQL ReDoS + URL sanitization alerts

2026-05-17 07:43:32 -03:00

load

chore(release): v3.6.6 — Stabilization (#1241)

2026-04-16 05:26:17 -03:00

manual

Release v3.8.0 (#2073)

2026-05-10 00:55:06 -03:00

security

feat: OmniRoute v1.0.0 — Intelligent AI Gateway & Universal LLM Proxy

2026-02-18 00:02:15 -03:00

translator

chore: apply PR 1495 and update changelog

2026-04-21 21:12:29 -03:00

unit

feat(authz): allow LOCAL_ONLY paths from private-LAN peer IPs (owner-authorized)

2026-05-30 17:26:10 -03:00

scratch_test.mjs

refactor: implement path utilities, add custom date formatting, improve type safety, and unify database imports

2026-04-21 21:10:48 -03:00