mirror of
https://github.com/diegosouzapw/OmniRoute.git
synced 2026-07-26 09:52:11 +03:00
d3ace8d611
## Security Fixes - Sanitize OMNIROUTE_MEMORY_MB with parseInt + range validation (64-16384) to prevent command injection via spawn() args - Validate URL protocol in shell.openExternal (http/https only) to prevent RCE in Electron renderer compromise - Bump default memory from 256MB to 512MB ## Electron package-lock.json - Added to .gitignore (5278 lines removed from tracking) ## Test Suite (64 tests, 9 suites) - electron-main.test.mjs: URL validation, IPC channels, window handler - electron-preload.test.mjs: channel whitelist, API surface, open-external - cli-memory.test.mjs: injection prevention, boundary values, .env parsing ## Documentation - Desktop App section added to all 30 READMEs (9 fully translated) - USER_GUIDE.md updated with 512MB default - .env.example reflects new defaults
108 lines
1.6 KiB
Plaintext
108 lines
1.6 KiB
Plaintext
# See https://help.github.com/articles/ignoring-files/ for more about ignoring files.
|
|
|
|
# dependencies
|
|
node_modules/
|
|
/.pnp
|
|
.pnp.*
|
|
.yarn/*
|
|
!.yarn/patches
|
|
!.yarn/plugins
|
|
!.yarn/releases
|
|
!.yarn/versions
|
|
|
|
# testing
|
|
coverage/
|
|
|
|
# next.js
|
|
.next/
|
|
/out/
|
|
|
|
# production
|
|
/build
|
|
/app
|
|
cloud/*
|
|
|
|
# misc
|
|
.DS_Store
|
|
*.pem
|
|
|
|
# debug
|
|
npm-debug.log*
|
|
yarn-debug.log*
|
|
yarn-error.log*
|
|
.pnpm-debug.log*
|
|
|
|
# env files (can opt-in for committing if needed)
|
|
.env*
|
|
!.env.example
|
|
|
|
# vercel
|
|
.vercel
|
|
|
|
# typescript
|
|
*.tsbuildinfo
|
|
next-env.d.ts
|
|
|
|
# data and logs
|
|
data/
|
|
logs/*
|
|
|
|
# analysis directories (generated, not tracked)
|
|
.analysis/
|
|
antigravity-manager-analysis/
|
|
|
|
# docs (allow specific tracked files)
|
|
docs/*
|
|
!docs/ARCHITECTURE.md
|
|
!docs/CODEBASE_DOCUMENTATION.md
|
|
!docs/CONTRIBUTING.md
|
|
!docs/USER_GUIDE.md
|
|
!docs/API_REFERENCE.md
|
|
!docs/TROUBLESHOOTING.md
|
|
!docs/EXECUTION_CONTEXT_PROVIDER_SYNC.md
|
|
!docs/TASK_NEBIUS_BACKEND_ENABLEMENT.md
|
|
!docs/frontend-backend-provider-gap-report.md
|
|
!docs/openapi.yaml
|
|
!docs/PLANO-IMPLANTACAO.md
|
|
!docs/TASKS.md
|
|
!docs/FASE-*.md
|
|
!docs/adr/
|
|
!docs/cli-tools/
|
|
!docs/planning/
|
|
!docs/improvement-plans/
|
|
!docs/api/
|
|
!docs/VM_DEPLOYMENT_GUIDE.md
|
|
!docs/FEATURES.md
|
|
!docs/screenshots/
|
|
!docs/i18n/
|
|
!docs/i18n/**
|
|
|
|
# open-sse tests
|
|
open-sse/test/*
|
|
|
|
# Ignore vscode AI rules
|
|
.github/instructions/codacy.instructions.md
|
|
|
|
# Playwright
|
|
test-results/
|
|
playwright-report/
|
|
blob-report/
|
|
cloud/
|
|
omnirouteCloud/
|
|
omnirouteSite/
|
|
|
|
# Security Analysis (standalone project with own git)
|
|
security-analysis/
|
|
|
|
# Deploy workflow (contains sensitive VPS credentials)
|
|
.agent/workflows/deploy.md
|
|
clipr/
|
|
app.log
|
|
*.tgz
|
|
|
|
# Backup directories
|
|
app.__qa_backup/
|
|
|
|
# Electron (subproject dependency lock)
|
|
electron/package-lock.json
|