Argenis 2ac571f406 fix: harden private host detection against SSRF bypass via IP parsing ...

Security fix for browser tool SSRF prevention via proper IP parsing.

2026-02-15 09:13:12 -05:00

..

agent

fix: use safe Unicode string truncation to prevent panics (CWE-119)

2026-02-15 06:49:48 -05:00

channels

fix(imessage): escape newlines in AppleScript string interpolation

2026-02-15 08:00:59 -05:00

config

fix: use safe Unicode string truncation to prevent panics (CWE-119)

2026-02-15 06:49:48 -05:00

cron

refactor: consolidate CLI command definitions to lib.rs

2026-02-15 06:52:33 -05:00

daemon

feat: integrate open-skills library and cleanup clippy warnings

2026-02-14 20:25:07 -05:00

doctor

fix: add missing port/host fields to GatewayConfig and apply_env_overrides method

2026-02-14 16:05:13 -05:00

gateway

fix(gateway): use constant-time comparison for WhatsApp verify_token

2026-02-15 07:42:52 -05:00

health

fix: add missing port/host fields to GatewayConfig and apply_env_overrides method

2026-02-14 16:05:13 -05:00

heartbeat

feat: enhance agent personality, tool guidance, and memory hygiene

2026-02-14 11:28:39 -05:00

integrations

refactor: consolidate CLI command definitions to lib.rs

2026-02-15 06:52:33 -05:00

memory

fix: prevent panics from byte-level string slicing on multi-byte UTF-8

2026-02-15 08:06:04 -05:00

observability

fix: resolve all clippy --all-targets warnings across 15 files

2026-02-14 03:52:57 -05:00

onboard

fix: use safe Unicode string truncation to prevent panics (CWE-119)

2026-02-15 06:49:48 -05:00

providers

feat: Support Responses API fallback for OpenAI-compatible providers (#134)

2026-02-15 09:03:42 -05:00

runtime

feat: enhance agent personality, tool guidance, and memory hygiene

2026-02-14 11:28:39 -05:00

security

fix(security): use path-component matching for forbidden paths (#132)

2026-02-15 08:30:48 -05:00

service

refactor: consolidate CLI command definitions to lib.rs

2026-02-15 06:52:33 -05:00

skills

fix(skills): prevent path traversal in skill remove command

2026-02-15 08:15:41 -05:00

tools

fix: harden private host detection against SSRF bypass via IP parsing

2026-02-15 09:13:12 -05:00

tunnel

fix: resolve all clippy --all-targets warnings across 15 files

2026-02-14 03:52:57 -05:00

lib.rs

refactor: consolidate CLI command definitions to lib.rs

2026-02-15 06:52:33 -05:00

main.rs

refactor: consolidate CLI command definitions to lib.rs

2026-02-15 06:52:33 -05:00

migration.rs

refactor: consolidate CLI command definitions to lib.rs

2026-02-15 06:52:33 -05:00

util.rs

fix: correct truncate_with_ellipsis to trim trailing whitespace

2026-02-15 07:06:56 -05:00