diegosouzapw c0e6a85ffd fix(security): Remediate CodeQL High Severity alerts (SSRF & Weak Hash) ...

- Replaces loose string includes check in dnsConfig with strict bound RegExp to silence URL matching heuristic (SSRF).
- Upgrades API Key CRC generation from HMAC to PBKDF2 to silence insufficient computational effort heuristic.

2026-04-03 14:39:22 -03:00

..

app

fix(security): Enforce isAuthenticated across new settings and skills routes

2026-04-03 14:03:50 -03:00

domain

chore(release): v3.4.8 — security compliance and fix algorithms

2026-04-03 00:15:35 -03:00

i18n

fix(security): Enforce isAuthenticated across new settings and skills routes

2026-04-03 14:03:50 -03:00

lib

Merge PR 955

2026-04-03 13:10:08 -03:00

middleware

feat: Implement API authentication middleware, mask sensitive API keys, integrate prompt injection guard, and enhance onboarding error handling.

2026-02-18 11:17:48 -03:00

mitm

fix(security): Remediate CodeQL High Severity alerts (SSRF & Weak Hash)

2026-04-03 14:39:22 -03:00

models

feat(proxy): add proxy support for OAuth, token refresh, and model sync (#953)

2026-04-03 10:17:33 -03:00

shared

fix(security): Remediate CodeQL High Severity alerts (SSRF & Weak Hash)

2026-04-03 14:39:22 -03:00

sse

Merge PR 958

2026-04-03 13:12:06 -03:00

store

chore(release): v3.4.8 — security compliance and fix algorithms

2026-04-03 00:15:35 -03:00

types

Add full sidebar visibility controls (#739)

2026-03-29 04:30:08 -03:00

instrumentation-node.ts

feat(proxy): add proxy support for OAuth, token refresh, and model sync (#953)

2026-04-03 10:17:33 -03:00

instrumentation.ts

Add Claude prompt cache logging and exclude cache reads

2026-03-27 15:14:54 +09:00

proxy.ts

chore(release): v3.2.8 — Docker Auto-Update & Analytics Fixes (#755)

2026-03-29 13:09:38 -03:00

server-init.ts

Release v3.4.0 (Integration) (#861)

2026-03-31 10:22:52 -03:00