WildDragonLLC/9router
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
9router/src/app/api
History
decolua 0c7c9de00a fix(security): re-auth on DB export/import + SSRF guard on web fetch 
- /api/settings/database now requires current password (header for GET,
  body for POST) in addition to session; CLI-token requests exempt
- add verifyDashboardPassword helper reusing login bcrypt check
- profile UI prompts password via modal before export/import
- /v1/web/fetch rejects internal/private/metadata targets via assertPublicUrl

Refs GHSA-qvfm-67h2-2qfx, GHSA-qj3v-64wj-q825

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-13 11:40:35 +07:00
..
auth fix(auth): real client IP rate-limiting + remote default-password guard 2026-06-08 12:10:02 +07:00
cli-tools feat(cowork): re-enable Claude Cowork with preset-only stdio MCP 2026-06-08 15:35:37 +07:00
combos Enhance token refresh functionality across multiple executors 2026-04-28 17:28:57 +07:00
health Fix tunnel health check 2026-05-21 14:30:59 +07:00
init chore: add buildOutput RTK filter, drop legacy cloud sync, internal cleanup 2026-05-16 10:54:41 +07:00
keys fix: custom model compatibility with antigravity/mitm (PR #250) 2026-03-06 16:44:16 +07:00
locale feat: add runtime i18n with English, Vietnamese, and Simplified Chinese support 2026-03-06 10:57:42 +07:00
mcp/[plugin] feat(cowork): re-enable Claude Cowork with preset-only stdio MCP 2026-06-08 15:35:37 +07:00
media-providers/tts feat: add minimax tts support (#1043) 2026-05-13 15:34:10 +07:00
models Harden STT ping input and expand model-test coverage 2026-06-03 01:53:34 +08:00
oauth feat(providers/codex): bulk add accounts via JSON 2026-06-08 10:08:46 +07:00
pricing feat(usage): implement cost tracking backend and pricing configuration 2026-01-09 17:48:42 +07:00
provider-nodes Enhance image and embedding provider support 2026-04-25 16:22:30 +07:00
providers fix(siliconflow): update baseUrl .cn -> .com + curate verified model list 2026-06-13 11:37:36 +07:00
proxy-pools feat(proxy-pools): add support for deno deploy relays and fix layout overflow issues in proxy pools dashboard (#1437) 2026-05-26 11:21:49 +07:00
settings fix(security): re-auth on DB export/import + SSRF guard on web fetch 2026-06-13 11:40:35 +07:00
shutdown fix(security)(app): unauthenticated server shutdown endpoint enables d (#519) 2026-04-08 15:39:09 +07:00
tags Initial commit 2026-01-05 09:58:59 +07:00
translator fix(codex): durable OAuth refresh lifecycle 2026-06-06 11:04:36 +07:00
tunnel fix(tunnel): detect system-installed Tailscale via dual-socket probe 2026-06-08 10:14:59 +07:00
usage fix(codex): durable OAuth refresh lifecycle 2026-06-06 11:04:36 +07:00
v1 feat(qoder): port Kiro-style provider integration with COSY signing 2026-05-29 17:36:27 +07:00
v1beta/models Enhance chat handling and introduce Caveman feature 2026-04-30 18:00:38 +07:00
version chore: release v0.4.27 2026-05-09 22:48:07 +07:00