whit3rabbitandClaude Sonnet 4.6 e6dd396b05 fix(security): apply 2026-03-31 security audit hardening ...

- Use getrandom for CSPRNG HMAC secret generation
- Case-insensitive admin path check prevents bypass via /Admin/, /ADMIN/
- Add TRUSTED_PROXY_DEPTH for multi-hop proxy X-Forwarded-For extraction
- Add dangerous-builtin-tools feature flag with security warning
- Remove repomix-output.xml, add .syntext to .gitignore

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-31 15:56:30 -05:00

..

admin-ui

fix: harden builtin tools and remove redundant error classification

2026-03-30 21:38:54 -05:00

src

fix(security): apply 2026-03-31 security audit hardening

2026-03-31 15:56:30 -05:00

tests

test(admin): update virtual_keys tests for one-time CSRF tokens

2026-03-31 06:48:44 -05:00

Cargo.toml

fix(security): apply 2026-03-31 security audit hardening

2026-03-31 15:56:30 -05:00