Agent Zero
604a2b7648
Phase 2: Fix high-priority security and stability issues (H1-H7)
H1: Sanitize error endpoint context (strip tokens/passwords, limit depth/size)
H2: Rate limiter IP spoofing fix (trusted proxy CIDR check for X-Forwarded-For)
H3: CSRF middleware uses Redis singleton instead of per-request connection
H4: WebSocket origin verification added to both kommunikation and ai_ui_control
H5: Storage path traversal protection, get_url() returns relative URL not filesystem path
H6: Security headers middleware (HSTS, X-Content-Type-Options, X-Frame-Options, CSP, Referrer-Policy)
H7: Forward-repair migration 0045 for databases that ran original 0021/0027
Also: add trusted_proxy_cidrs to config, add verify_ws_origin to auth
2026-07-26 20:49:15 +02:00
..
2026-07-26 20:45:42 +02:00
2026-07-25 21:03:46 +02:00
2026-07-26 20:49:15 +02:00
2026-07-26 03:08:26 +02:00
2026-07-26 20:45:42 +02:00
2026-07-26 20:45:42 +02:00
2026-07-24 10:37:44 +02:00
2026-07-26 15:14:24 +02:00
2026-07-26 20:49:15 +02:00
2026-07-26 20:45:42 +02:00
2026-07-25 21:03:46 +02:00
2026-07-25 02:41:55 +02:00
2026-07-25 21:03:46 +02:00
2026-07-25 09:19:32 +02:00
2026-07-25 21:03:46 +02:00
2026-07-24 10:37:44 +02:00
2026-07-25 09:19:32 +02:00
2026-07-26 20:45:42 +02:00
2026-07-25 21:03:46 +02:00
2026-07-25 21:03:46 +02:00
2026-07-08 23:50:59 +02:00
2026-07-25 21:03:46 +02:00