OmniRoute

mirror of https://github.com/diegosouzapw/OmniRoute.git synced 2026-09-14 10:52:17 +03:00

Files

diegosouzapw cfd1007f0d fix(docker): require a per-session token on the VNC browser CDP bridge (#12571 )

docker/vnc-browser/chromium/cdp-bridge.py republished Chromium's loopback
CDP port (127.0.0.1:9222) onto 0.0.0.0:9223 with zero auth, and the
container joined Docker's default bridge network — any sibling container
could connect to 9223 and issue arbitrary CDP commands (Runtime.evaluate,
cookie theft) against a live, credential-bearing browser-login session.

- cdp-bridge.py now requires a shared secret (CDP_BRIDGE_TOKEN) presented
  as an X-Omni-Cdp-Token header on the first bytes of a connection before
  forwarding anything upstream; a missing/invalid token gets the socket
  closed silently.
- src/lib/vncSession/service.ts generates a random per-session token,
  injects it into the container via -e CDP_BRIDGE_TOKEN, and joins the
  container to a dedicated Docker network (not the default bridge) as
  defense-in-depth.
- src/lib/vncSession/harvest.ts forwards the token on every CDP HTTP/WS
  call so the harvester keeps working end-to-end.

2026-09-10 13:53:01 -03:00

API_REFERENCE.md

fix(monitoring): expose failed connection ids on credentialHealth (#12876 )

2026-09-10 10:42:26 -03:00

CLI-TOOLS.md

docs(cli): document CLI_PRIME_AGENT_BIN and correct the CLI Agents count

2026-09-01 00:58:43 -03:00

EMBEDDINGS.md

docs: add embeddings client runbook for Gemini 2 and Jina omni (#10569 )

2026-08-18 10:52:29 -03:00

ENVIRONMENT.md

fix(docker): require a per-session token on the VNC browser CDP bridge (#12571 )