9router/src/lib
decolua 126aa244c5 fix(kiro): validate region to prevent SSRF (GHSA-6mwv-4mrm-5p3m)
Reject non-AWS region values before interpolating them into upstream
URLs and stop reflecting upstream response bodies to the client.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-19 15:09:18 +07:00
..
auth fix(security): re-auth on DB export/import + SSRF guard on web fetch 2026-06-13 11:40:35 +07:00
db fix(usage): add missing await on getAdapter() in getRecentLogs 2026-06-17 10:08:36 +07:00
mcp feat(cowork): re-enable Claude Cowork with preset-only stdio MCP 2026-06-08 15:35:37 +07:00
network feat(proxy-pools): add support for deno deploy relays and fix layout overflow issues in proxy pools dashboard (#1437) 2026-05-26 11:21:49 +07:00
oauth fix(kiro): validate region to prevent SSRF (GHSA-6mwv-4mrm-5p3m) 2026-06-19 15:09:18 +07:00
qoder refactor(open-sse): registry consolidation + DRY media/oauth/adhoc cleanup 2026-06-14 13:15:48 +07:00
tunnel fix(auth): real client IP rate-limiting + remote default-password guard 2026-06-08 12:10:02 +07:00
updater chore: release v0.4.27 2026-05-09 22:48:07 +07:00
appUpdater.js # v0.4.29 (2026-05-10) 2026-05-10 21:56:40 +07:00
consoleLogBuffer.js Feat : console log 2026-03-02 09:31:16 +07:00
dataDir.js fix(mitm): update Kiro API endpoint to runtime.us-east-1.kiro.dev 2026-06-08 09:43:45 +07:00
disabledModelsDb.js feat(db): migrate from lowdb to SQLite with repos pattern 2026-05-09 17:48:20 +07:00
localDb.js feat(db): migrate from lowdb to SQLite with repos pattern 2026-05-09 17:48:20 +07:00
mitmAliasCache.js # v0.4.29 (2026-05-10) 2026-05-10 21:56:40 +07:00
providerNormalization.js feat(xai): add xAI Grok provider with OAuth + API key auth + image 2026-05-21 11:33:18 +07:00
requestDetailsDb.js feat(db): migrate from lowdb to SQLite with repos pattern 2026-05-09 17:48:20 +07:00
usageDb.js feat(db): migrate from lowdb to SQLite with repos pattern 2026-05-09 17:48:20 +07:00