d8c2298d07
- mask API keys in usage stats/history responses (apiKeyMasked) - validate proxy URL scheme + reject shell metachars before env write - escape HTML in OAuth callback page to prevent XSS - atomic O_EXCL lock file to prevent TOCTOU race in MITM startServer - set mitmIsRestarting guard synchronously before any await Co-authored-by: Cursor <cursoragent@cursor.com> |
||
|---|---|---|
| .. | ||
| adapters | ||
| helpers | ||
| migrations | ||
| repos | ||
| backup.js | ||
| driver.js | ||
| index.js | ||
| migrate.js | ||
| paths.js | ||
| schema.js | ||
| version.js | ||