WildDragonLLC/9router
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
9router/src/lib
History
decolua 0c7c9de00a fix(security): re-auth on DB export/import + SSRF guard on web fetch 
- /api/settings/database now requires current password (header for GET,
  body for POST) in addition to session; CLI-token requests exempt
- add verifyDashboardPassword helper reusing login bcrypt check
- profile UI prompts password via modal before export/import
- /v1/web/fetch rejects internal/private/metadata targets via assertPublicUrl

Refs GHSA-qvfm-67h2-2qfx, GHSA-qj3v-64wj-q825

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-13 11:40:35 +07:00
..
auth fix(security): re-auth on DB export/import + SSRF guard on web fetch 2026-06-13 11:40:35 +07:00
db feat(providers/codex): bulk add accounts via JSON 2026-06-08 10:08:46 +07:00
mcp feat(cowork): re-enable Claude Cowork with preset-only stdio MCP 2026-06-08 15:35:37 +07:00
network feat(proxy-pools): add support for deno deploy relays and fix layout overflow issues in proxy pools dashboard (#1437) 2026-05-26 11:21:49 +07:00
oauth enhance Kiro profile ARN resolution 2026-06-13 09:28:55 +07:00
qoder fix(qoder): allow qmodel_latest model key 2026-06-06 10:44:37 +07:00
tunnel fix(auth): real client IP rate-limiting + remote default-password guard 2026-06-08 12:10:02 +07:00
updater chore: release v0.4.27 2026-05-09 22:48:07 +07:00
usage feat(executors): Improved UI components for displaying provider limits and usage statistics in the dashboard. 2026-02-05 18:38:50 +07:00
appUpdater.js # v0.4.29 (2026-05-10) 2026-05-10 21:56:40 +07:00
consoleLogBuffer.js Feat : console log 2026-03-02 09:31:16 +07:00
dataDir.js fix(mitm): update Kiro API endpoint to runtime.us-east-1.kiro.dev 2026-06-08 09:43:45 +07:00
disabledModelsDb.js feat(db): migrate from lowdb to SQLite with repos pattern 2026-05-09 17:48:20 +07:00
localDb.js feat(db): migrate from lowdb to SQLite with repos pattern 2026-05-09 17:48:20 +07:00
mitmAliasCache.js # v0.4.29 (2026-05-10) 2026-05-10 21:56:40 +07:00
providerNormalization.js feat(xai): add xAI Grok provider with OAuth + API key auth + image 2026-05-21 11:33:18 +07:00
requestDetailsDb.js feat(db): migrate from lowdb to SQLite with repos pattern 2026-05-09 17:48:20 +07:00
usageDb.js feat(db): migrate from lowdb to SQLite with repos pattern 2026-05-09 17:48:20 +07:00