SaelixCode 2e0f3e2711 security: harden terminal WebSocket endpoints against three attack vectors ...

- Reject node_proxy scoped JWT tokens with 403 on host-console and
  container exec (/ws) upgrades; machine-to-machine credentials must
  not open interactive shells
- Validate stackParam against path.resolve + startsWith(baseDir) to
  prevent directory traversal on the PTY cwd (Rule 9 pattern)
- Strip JWT_SECRET, AUTH_PASSWORD, AUTH_PASSWORD_HASH, DATABASE_URL
  from the environment passed to node-pty spawned shells

2026-03-21 00:12:16 -04:00

..

public

feat: add frontend index.html and Vite logo; enhance system stats API with network metrics

2026-02-26 14:43:45 -05:00

src

security: harden terminal WebSocket endpoints against three attack vectors

2026-03-21 00:12:16 -04:00

cookies.txt

feat: add alert management functionality in NotificationSettingsModal and implement stacks API endpoint

2026-02-27 09:52:54 -05:00

package-lock.json

feat(settings): harden settings API and overhaul SettingsModal

2026-03-20 19:57:34 -04:00

package.json

feat(settings): harden settings API and overhaul SettingsModal

2026-03-20 19:57:34 -04:00

tsconfig.json

Initial commit: Sencho V1 complete with Auth and Dockerization

2026-02-20 18:39:32 -05:00