hamsa0x7 d8c2298d07 fix(security): patch 5 vulnerabilities from security audit ...

- mask API keys in usage stats/history responses (apiKeyMasked)
- validate proxy URL scheme + reject shell metachars before env write
- escape HTML in OAuth callback page to prevent XSS
- atomic O_EXCL lock file to prevent TOCTOU race in MITM startServer
- set mitmIsRestarting guard synchronously before any await

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-06-26 11:04:51 +07:00

..

adapters

# v0.4.28 (2026-05-10)

2026-05-10 08:44:14 +07:00

helpers

feat(db): migrate from lowdb to SQLite with repos pattern

2026-05-09 17:48:20 +07:00

migrations

feat(db): migrate from lowdb to SQLite with repos pattern

2026-05-09 17:48:20 +07:00

repos

fix(security): patch 5 vulnerabilities from security audit

2026-06-26 11:04:51 +07:00

backup.js

feat(db): migrate from lowdb to SQLite with repos pattern

2026-05-09 17:48:20 +07:00

driver.js

# v0.4.28 (2026-05-10)

2026-05-10 08:44:14 +07:00

index.js

feat(db): migrate from lowdb to SQLite with repos pattern

2026-05-09 17:48:20 +07:00

migrate.js

# v0.4.52 (2026-05-17)

2026-05-17 16:37:26 +07:00

paths.js

feat(db): migrate from lowdb to SQLite with repos pattern

2026-05-09 17:48:20 +07:00

schema.js

feat(db): migrate from lowdb to SQLite with repos pattern

2026-05-09 17:48:20 +07:00

version.js

feat(db): migrate from lowdb to SQLite with repos pattern

2026-05-09 17:48:20 +07:00