No description
c10aa7955c
- SSRF: disable automatic redirects, manually follow up to 5 hops with IP re-validation at each step to prevent redirect-to-localhost bypass - Identity file: enforce 0600 permissions on tinyweb_identity at load and creation to prevent other users from reading the private key - Error messages: replace raw exception strings with generic messages to avoid leaking internal paths/hostnames to the UI - DB connections: wrap all get_db() usage in try/finally to guarantee close() even when handlers throw mid-operation Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| themes | ||
| .gitignore | ||
| app.py | ||
| CLAUDE.md | ||
| db.py | ||
| gateway.py | ||
| handlers.py | ||
| README.md | ||
| requirements.txt | ||
| rns_client.py | ||
| templates.py | ||