sencho

mirror of https://github.com/Studio-Saelix/sencho.git synced 2026-08-06 00:47:52 +00:00

T

SaelixCode 2e0f3e2711 security: harden terminal WebSocket endpoints against three attack vectors

- Reject node_proxy scoped JWT tokens with 403 on host-console and
  container exec (/ws) upgrades; machine-to-machine credentials must
  not open interactive shells
- Validate stackParam against path.resolve + startsWith(baseDir) to
  prevent directory traversal on the PTY cwd (Rule 9 pattern)
- Strip JWT_SECRET, AUTH_PASSWORD, AUTH_PASSWORD_HASH, DATABASE_URL
  from the environment passed to node-pty spawned shells

2026-03-21 00:12:16 -04:00

.github/workflows

ci: fix npm cache dependency path for monorepo

2026-03-04 16:09:30 -05:00

backend

security: harden terminal WebSocket endpoints against three attack vectors

2026-03-21 00:12:16 -04:00

frontend

fix(ui): resolve 9 animated design system bugs including Monaco tab height accumulation

2026-03-20 23:51:54 -04:00

.dockerignore

feat: add HostConsole component for interactive terminal access and integrate into EditorLayout