mirror of
https://github.com/sol1/rustguac.git
synced 2026-09-10 09:35:45 +00:00
Dave Kempe
99d79fe05d
New features: - Native Chromium autofill: pre-populate Login Data SQLite before launch, zero external deps (no Node.js/Playwright needed for simple login flows) - Per-entry domain allowlisting: restrict which domains Chromium can reach via --host-rules (separate from server-side web_allowed_networks CIDR) - Per-entry clipboard control: disable-copy and disable-paste for all session types (SSH, RDP, VNC, Web) via guacd native parameters - Guacamole import: `rustguac import-guacamole` parses mysqldump SQL and writes entries to Vault address book Security hardening: - Comprehensive Chromium managed policy deployed via install.sh, Dockerfile, and debian/postinst (blocks DevTools, downloads, file dialogs, extensions, dangerous URL schemes) - Profile isolation: each web session gets a unique UUID-based profile dir - Autofill credentials encrypted with Chromium's native os_crypt (AES-128-CBC) Documentation: - Updated README, docs/api.md, docs/security.md, docs/configuration.md, docs/overview.md, docs/integrations.md with all new features - Clarified two-layer domain restriction (web_allowed_networks vs allowed_domains) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
