pulse

mirror of https://github.com/rcourtman/Pulse.git synced 2026-09-23 11:46:28 +00:00

Files

T

rcourtman c295ee277f security: add scope checks to AI endpoints and mitigate CSWSH

- AI Intelligence endpoints (/api/ai/intelligence/*, /api/ai/forecast/*,
  /api/ai/unified/findings, etc.) now require ai:execute scope to prevent
  low-privilege tokens from reading sensitive intelligence data

- AI Knowledge endpoints (/api/ai/knowledge/*) now require ai:chat scope
  to prevent arbitrary guest data access across the fleet

- AI Debug Context (/api/ai/debug/context) now requires settings:read scope
  to prevent system prompt and infrastructure details leakage

- WebSocket origin check now validates peer IP is private when allowing
  private network origins, mitigating CSWSH attacks where a malicious page
  on the same LAN tries to hijack connections using victim's session cookie

2026-02-03 19:40:46 +00:00

concurrency_test.go

Fix settings security tab navigation

2025-10-11 23:29:47 +00:00

hub_concurrency_test.go

refactor: use strconv.Itoa instead of string(rune()) in test

2025-10-20 15:12:14 +00:00

hub_more2_test.go

test: Add comprehensive test coverage across packages

2026-01-19 19:26:18 +00:00

hub_more_test.go

test: Add comprehensive test coverage across packages