 posimai
|
7c6ecb77bc
|
security(dev): SSRF fix, WS limit, log rotation, BIND_HOST, sw.js API cache skip, .gitignore
- /api/check: add requireLocal + block 100.x/IPv6 in SSRF filter
- WebSocket: limit concurrent sessions to 3
- Session logs: auto-prune after 30 days
- server.listen: respect BIND_HOST env var
- sw.js: exclude /api/* from cache
- .gitignore: protect .env and node_modules
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
2026-04-24 16:44:01 +09:00 |