main

KKayvan Sylvanfix: harden servers, templates, plugins, storage, and user interfaces

596e03e0创建于 4 天前历史提交

文件	最后提交记录	最后更新时间
.streamlit	fix: harden servers, templates, plugins, storage, and user interfaces - Enforce host, origin, JSON, and request size checks. - Resolve template tokens once; preserve literal workflow output. - Restrict server patterns to text and datetime plugins. - Confine file access and writes; reject unsafe symlinks. - Limit network fetches to public addresses without credentials. - Protect sessions with locking, atomic writes, and private permissions. - Merge configuration updates safely and fully mask secrets. - Sanitize terminal output, notifications, and dynamic shell completions. - Add content sanitization, security policies, and Streamlit token checks. - Expand security regression coverage, documentation, and CI race testing.	4 天前
requirements.txt	refactor: restructure project to align with standard Go layout ### CHANGES - Introduce `cmd` directory for all main application binaries. - Move all Go packages into the `internal` directory. - Rename the `restapi` package to `server` for clarity. - Consolidate patterns and strategies into a new `data` directory. - Group all auxiliary scripts into a new `scripts` directory. - Move all documentation and images into a `docs` directory. - Update all Go import paths to reflect the new structure. - Adjust CI/CD workflows and build commands for new layout.	1 年前
streamlit.py	fix: harden servers, templates, plugins, storage, and user interfaces - Enforce host, origin, JSON, and request size checks. - Resolve template tokens once; preserve literal workflow output. - Restrict server patterns to text and datetime plugins. - Confine file access and writes; reject unsafe symlinks. - Limit network fetches to public addresses without credentials. - Protect sessions with locking, atomic writes, and private permissions. - Merge configuration updates safely and fully mask secrets. - Sanitize terminal output, notifications, and dynamic shell completions. - Add content sanitization, security policies, and Streamlit token checks. - Expand security regression coverage, documentation, and CI race testing.	4 天前