发布

  • v0.3.30 — Security Hardening
    Release / Desktop / macOS ARM64 (push) Has been cancelled
    Release / Desktop / Windows ARM64 (push) Has been cancelled
    Release / Desktop / macOS x86_64 (push) Has been cancelled
    Release / Desktop / Windows x86_64 (push) Has been cancelled
    Release / Desktop / Linux x86_64 (push) Has been cancelled
    Release / CLI / aarch64-apple-darwin (push) Has been cancelled
    Release / CLI / x86_64-apple-darwin (push) Has been cancelled
    Release / CLI / aarch64-unknown-linux-gnu (push) Has been cancelled
    Release / CLI / x86_64-unknown-linux-gnu (push) Has been cancelled
    Release / CLI / aarch64-pc-windows-msvc (push) Has been cancelled
    Release / CLI / x86_64-pc-windows-msvc (push) Has been cancelled
    Release / Docker Image (push) Has been cancelled

    frostbyte_neo 发布于 2026-03-08 17:20:53 +00:00

    Shell exec: direct argv execution (no shell interpreter) in Allowlist mode
    Shell metacharacters: block semicolons, pipes, redirects, braces, null bytes
    API auth: all public endpoints GET-only, POST/PUT/DELETE require auth
    OFP wire: authenticated HMAC I/O for all post-handshake messages
    WebSocket: constant-time API key comparison (timing attack fix)
    Audit trail: SQLite persistence with Merkle chain integrity on boot
    Gemini: API key as query param, enhanced error classification
    CJK IME, migration JSON5, Discord ignore_bots, Browser Hand chromium

    下载附件