main

KKayvan Sylvanfix: harden servers, templates, plugins, storage, and user interfaces

596e03e0创建于 2 天前历史提交

文件	最后提交记录	最后更新时间
strategy.go	fix: harden servers, templates, plugins, storage, and user interfaces - Enforce host, origin, JSON, and request size checks. - Resolve template tokens once; preserve literal workflow output. - Restrict server patterns to text and datetime plugins. - Confine file access and writes; reject unsafe symlinks. - Limit network fetches to public addresses without credentials. - Protect sessions with locking, atomic writes, and private permissions. - Merge configuration updates safely and fully mask secrets. - Sanitize terminal output, notifications, and dynamic shell completions. - Add content sanitization, security policies, and Streamlit token checks. - Expand security regression coverage, documentation, and CI race testing.	2 天前
strategy_test.go	fix: harden servers, templates, plugins, storage, and user interfaces - Enforce host, origin, JSON, and request size checks. - Resolve template tokens once; preserve literal workflow output. - Restrict server patterns to text and datetime plugins. - Confine file access and writes; reject unsafe symlinks. - Limit network fetches to public addresses without credentials. - Protect sessions with locking, atomic writes, and private permissions. - Merge configuration updates safely and fully mask secrets. - Sanitize terminal output, notifications, and dynamic shell completions. - Add content sanitization, security policies, and Streamlit token checks. - Expand security regression coverage, documentation, and CI race testing.	2 天前