sencho

mirror of https://github.com/Studio-Saelix/sencho.git synced 2026-10-25 21:20:25 +00:00

Files

T

History

Anso 5d92a69eba fix(mesh): compare the Access redirect host, share the api-token test helper

Two code-scanning findings on the dial-diagnostics change.

The Cloudflare Access check looked for the Access domain anywhere in the
Location header. A redirect to another host whose query or path merely
mentions it was reported as an Access login, which sends the operator after
a gateway that is not in the path. The target is now parsed and its host
compared, so only a redirect that actually points at Access is labelled that
way. Covered in both directions, and the negative cases were confirmed to
fail against the previous check.

The scope-refusal test hashed its own token instead of using the shared
helper every other token test uses, which is what the weak-hash finding
keys on. Switched to the helper.

2026-09-26 03:48:36 -04:00

scripts

docs(git): publish a versioned Git transport support matrix (#1883 )

2026-09-01 21:56:02 -04:00

src

fix(mesh): compare the Access redirect host, share the api-token test helper

2026-09-26 03:48:36 -04:00

.npmrc

chore(deps): upgrade major dependencies (ESLint 10, recharts 3, TS 6, Vite 8) (#130 )

2026-03-25 00:03:08 -04:00

eslint.config.mjs

refactor(backend): collapse entitlement provider abstraction back to LicenseService (#889 )