jimmy/nas-tools

Fork 0

Files

T

History

Gan, Jimmy dac163d88c

Deploy Dashboard (Dev) / deploy-dev (push) Failing after 55s

Details

Run Tests / Backend Tests (push) Successful in 2m2s

Details

Run Tests / Test Summary (push) Failing after 12s

Details

Run Tests / Frontend Tests (push) Failing after 2m4s

Details

security: fix critical vulnerabilities (issues #2 and #3 )

Issue #2: Unprotected Chat Summary Trigger (CRITICAL)
- Add authentication and admin authorization to /trigger endpoint
- Add path validation to prevent directory traversal
- Block access to system directories (/etc, /root, /sys, /proc, /boot)
- Add tests for unauthorized access and invalid paths

Issue #3: Exception Information Disclosure (HIGH)
- Replace raw exception messages with generic errors
- Log full exception details server-side with logger.exception()
- Affected files: auth.py, files.py, passkey.py, opc_agents.py
- Prevents information leakage about system architecture

Security Impact:
- Prevents unauthenticated file system writes
- Reduces reconnaissance opportunities for attackers
- Maintains security while preserving debugging capability

Tests: 214 passing, all security tests verified

2026-04-08 00:57:14 +08:00

backend

security: fix critical vulnerabilities (issues #2 and #3 )

2026-04-08 00:57:14 +08:00

frontend

fix: add compilerOptions to Svelte plugin in vitest config

2026-04-08 00:47:31 +08:00

.env.example

Add OpenClaw, backup automation, health checks, Telegram notifications

2026-02-19 21:40:34 +08:00

deploy.sh

Use docker save/load for cross-build deploy from M1 to NAS