main

KKayvan Sylvanfix: harden servers, templates, plugins, storage, and user interfaces

596e03e0创建于 9 天前历史提交

文件	最后提交记录	最后更新时间
groups_items.go	chore: clarify comments and remove obsolete code examples across backend and web - Remove redundant comments across Go sources and Svelte components. - Clarify documentation for provider authentication, streaming, and model discovery. - Explain cache behavior, configuration precedence, and locale fallback rules. - Document security safeguards, implementation limitations, and existing test boundaries. - Remove obsolete commented code without changing runtime behavior. - Refresh documentation references and clarify tool dependency requirements.	16 天前
httpclient.go	fix: harden servers, templates, plugins, storage, and user interfaces - Enforce host, origin, JSON, and request size checks. - Resolve template tokens once; preserve literal workflow output. - Restrict server patterns to text and datetime plugins. - Confine file access and writes; reject unsafe symlinks. - Limit network fetches to public addresses without credentials. - Protect sessions with locking, atomic writes, and private permissions. - Merge configuration updates safely and fully mask secrets. - Sanitize terminal output, notifications, and dynamic shell completions. - Add content sanitization, security policies, and Streamlit token checks. - Expand security regression coverage, documentation, and CI race testing.	9 天前
httpclient_test.go	fix: harden servers, templates, plugins, storage, and user interfaces - Enforce host, origin, JSON, and request size checks. - Resolve template tokens once; preserve literal workflow output. - Restrict server patterns to text and datetime plugins. - Confine file access and writes; reject unsafe symlinks. - Limit network fetches to public addresses without credentials. - Protect sessions with locking, atomic writes, and private permissions. - Merge configuration updates safely and fully mask secrets. - Sanitize terminal output, notifications, and dynamic shell completions. - Add content sanitization, security policies, and Streamlit token checks. - Expand security regression coverage, documentation, and CI race testing.	9 天前
utils.go	chore: clarify comments and remove obsolete code examples across backend and web - Remove redundant comments across Go sources and Svelte components. - Clarify documentation for provider authentication, streaming, and model discovery. - Explain cache behavior, configuration precedence, and locale fallback rules. - Document security safeguards, implementation limitations, and existing test boundaries. - Remove obsolete commented code without changing runtime behavior. - Refresh documentation references and clarify tool dependency requirements.	16 天前