-
v0.3.30 — Security Hardening
Release / Desktop / macOS ARM64 (push) Has been cancelledRelease / Desktop / Windows ARM64 (push) Has been cancelledRelease / Desktop / macOS x86_64 (push) Has been cancelledRelease / Desktop / Windows x86_64 (push) Has been cancelledRelease / Desktop / Linux x86_64 (push) Has been cancelledRelease / CLI / aarch64-apple-darwin (push) Has been cancelledRelease / CLI / x86_64-apple-darwin (push) Has been cancelledRelease / CLI / aarch64-unknown-linux-gnu (push) Has been cancelledRelease / CLI / x86_64-unknown-linux-gnu (push) Has been cancelledRelease / CLI / aarch64-pc-windows-msvc (push) Has been cancelledRelease / CLI / x86_64-pc-windows-msvc (push) Has been cancelledRelease / Docker Image (push) Has been cancelled发布于
2026-03-08 17:20:53 +00:00 Shell exec: direct argv execution (no shell interpreter) in Allowlist mode
Shell metacharacters: block semicolons, pipes, redirects, braces, null bytes
API auth: all public endpoints GET-only, POST/PUT/DELETE require auth
OFP wire: authenticated HMAC I/O for all post-handshake messages
WebSocket: constant-time API key comparison (timing attack fix)
Audit trail: SQLite persistence with Merkle chain integrity on boot
Gemini: API key as query param, enhanced error classification
CJK IME, migration JSON5, Discord ignore_bots, Browser Hand chromium下载附件