2 Commits

Author	SHA1	Message	Date
UNITRONIX	648a8d4f8a	security(3.4): harden console and Go server for pre-release audit ... Commit web-nodejs lockfile with tar override; CI uses npm ci and moderate npm audit. Add LOG_LEVEL filtering and log redaction in Node console and Go server. Validate WS tokens on bd-signal; require single-use token for remote-agent relay. Limit active relay sessions per IP and block open enrollment without TLS.	2026-07-12 20:44:46 +02:00
UNITRONIX	6d7692ea6a	fix(security): phase-A log redaction, font/transfer paths, CI permissions ... Stop logging generated admin passwords, redact API login usernames, confine font and file-transfer temp paths with safePath, and scope GitHub Actions permissions in build.yml.	2026-06-09 02:42:56 +02:00