Sucukdeluxe
ebfd98226b
feat: harden remote diagnostics authentication
...
Bind the diagnostics flow to bearer-only authentication and reject query token attempts with controlled responses. Compare bearer token bytes with timing-safe equality, remove wildcard CORS, and mark diagnostics/support responses as no-store.
Move trace configuration mutation behind POST, add method failure handling, add a small per-IP/loopback in-memory request limit, and keep generated setup and support-manifest URLs token-free while pointing support access at a local bridge/tunnel flow.
Sanitize backup remote diagnostics on export and restore so legacy token, endpoint, host mode, and port values are not persisted; restores only keep the allowlist and force local binding.
Tests cover bearer accept/reject, query rejection, GET mutation rejection, no-store/CORS behavior, loopback default binding, rate limiting, token-free hints, and backup sanitation.
2026-08-12 00:59:07 +02:00
..
2026-08-11 23:22:44 +02:00
2026-08-11 23:47:49 +02:00
2026-08-01 22:29:53 +02:00
2026-08-11 23:22:44 +02:00
2026-08-11 23:22:44 +02:00
2026-08-11 23:22:44 +02:00
2026-08-10 14:15:57 +02:00
2026-08-11 23:22:44 +02:00
2026-08-01 22:29:53 +02:00
2026-08-09 21:32:09 +02:00
2026-08-09 21:32:09 +02:00
2026-08-09 21:32:09 +02:00
2026-08-12 00:43:02 +02:00
2026-08-10 19:42:49 +02:00
2026-08-01 22:29:53 +02:00
2026-08-11 23:47:49 +02:00
2026-08-01 22:29:53 +02:00
2026-08-01 22:29:53 +02:00
2026-08-11 22:32:58 +02:00
2026-08-11 22:32:58 +02:00
2026-08-01 22:29:53 +02:00
2026-08-11 22:32:58 +02:00
2026-08-12 00:59:07 +02:00
2026-08-01 22:29:53 +02:00
2026-08-12 00:43:02 +02:00
2026-08-01 22:29:53 +02:00
2026-08-11 06:03:07 +02:00
2026-08-10 19:42:49 +02:00
2026-08-01 22:29:53 +02:00
2026-08-01 22:29:53 +02:00
2026-08-11 00:46:46 +02:00
2026-08-01 22:29:53 +02:00
2026-08-11 21:50:02 +02:00
2026-08-11 18:31:01 +02:00
2026-08-12 00:59:07 +02:00
2026-08-12 00:59:07 +02:00
2026-08-01 22:29:53 +02:00
2026-08-10 23:33:34 +02:00
2026-08-10 19:42:49 +02:00
2026-08-10 14:15:57 +02:00
2026-08-01 22:29:53 +02:00
2026-08-11 20:08:06 +02:00
2026-08-10 20:38:11 +02:00
2026-08-09 14:59:52 +02:00
2026-08-12 00:16:26 +02:00
2026-08-01 22:29:53 +02:00
2026-08-01 22:29:53 +02:00
2026-08-01 22:29:53 +02:00
2026-08-01 22:29:53 +02:00
2026-08-01 22:29:53 +02:00
2026-08-10 14:15:57 +02:00
2026-08-11 16:18:38 +02:00
2026-08-01 22:29:53 +02:00
2026-08-12 00:09:18 +02:00
2026-08-01 22:29:53 +02:00
2026-08-12 00:30:49 +02:00
2026-08-01 22:29:53 +02:00
2026-08-11 23:22:44 +02:00
2026-08-01 22:29:53 +02:00
2026-08-01 22:29:53 +02:00
2026-08-01 22:29:53 +02:00
2026-08-01 22:29:53 +02:00
2026-08-11 18:31:01 +02:00
2026-08-01 22:29:53 +02:00
2026-08-01 22:29:53 +02:00
2026-08-07 18:29:06 +02:00
2026-08-07 18:29:06 +02:00
2026-08-11 22:32:58 +02:00
2026-08-01 22:29:53 +02:00
2026-08-11 20:08:06 +02:00
2026-08-10 19:42:49 +02:00
2026-08-12 00:30:49 +02:00
2026-08-01 22:29:53 +02:00
2026-08-01 22:29:53 +02:00
2026-08-11 23:22:44 +02:00
2026-08-01 22:29:53 +02:00
2026-08-11 06:03:07 +02:00
2026-08-10 19:42:49 +02:00
2026-08-01 22:29:53 +02:00
2026-08-01 22:29:53 +02:00
2026-08-01 22:29:53 +02:00
2026-08-09 21:32:09 +02:00
2026-08-09 22:21:34 +02:00
2026-08-11 23:22:44 +02:00
2026-08-11 02:49:41 +02:00
2026-08-01 22:29:53 +02:00
2026-08-11 18:31:01 +02:00
2026-08-11 21:58:29 +02:00
2026-08-01 22:29:53 +02:00
2026-08-10 14:15:57 +02:00
2026-08-01 22:29:53 +02:00
2026-08-10 14:15:57 +02:00
2026-08-01 22:29:53 +02:00
2026-08-11 18:31:01 +02:00
2026-08-01 22:29:53 +02:00
2026-08-01 22:29:53 +02:00
2026-08-11 18:31:01 +02:00
2026-08-01 22:29:53 +02:00
2026-08-01 22:29:53 +02:00
2026-08-11 23:22:44 +02:00
2026-08-10 14:15:57 +02:00