Dorian 6656d2f1d9 fix: implement 22 security pentest remediation fixes ...

Server-side session management with SHA-256 hashed tokens and HttpOnly
cookies. Auth middleware gating all RPC/WS/proxy routes with method
allowlist. Login rate limiting (5/60s per IP). CORS restricted to
config origin. Docker registry allowlist. App ID and path validation.
P2P message sanitization (HTML + log injection). Onion address and
known-peer validation. Nginx security headers (CSP, X-Frame-Options,
etc.) and AIUI proxy auth. Systemd hardening (non-root, NoNewPrivileges,
ProtectSystem).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-06 03:26:56 +00:00

..

api

fix: implement 22 security pentest remediation fixes

2026-03-06 03:26:56 +00:00

container

feat: cloud native file browser, settings Claude auth, deploy hardening

2026-03-04 23:05:01 +00:00

auth.rs

Implement onboarding reset functionality and enhance backup features

2026-03-02 08:34:13 +00:00

backup.rs

Implement onboarding reset functionality and enhance backup features

2026-03-02 08:34:13 +00:00

config.rs

Update Fedimint configuration and enhance onboarding process

2026-02-17 15:03:34 +00:00

data_model.rs

Update Fedimint configuration and enhance onboarding process

2026-02-17 15:03:34 +00:00

electrs_status.rs

feat: complete Phase 1 foundation hardening + three-mode UI design doc

2026-03-04 05:23:42 +00:00

identity.rs

Update Fedimint configuration and enhance onboarding process

2026-02-17 15:03:34 +00:00

main.rs

fix: implement 22 security pentest remediation fixes

2026-03-06 03:26:56 +00:00

node_message.rs

fix: implement 22 security pentest remediation fixes

2026-03-06 03:26:56 +00:00

nostr_discovery.rs

Update Fedimint configuration and enhance onboarding process

2026-02-17 15:03:34 +00:00

peers.rs

Update Fedimint configuration and enhance onboarding process

2026-02-17 15:03:34 +00:00

port_allocator.rs

Update Fedimint configuration and enhance onboarding process

2026-02-17 15:03:34 +00:00

server.rs

Update Fedimint configuration and enhance onboarding process

2026-02-17 15:03:34 +00:00

session.rs

fix: implement 22 security pentest remediation fixes

2026-03-06 03:26:56 +00:00

state.rs

Enhance development workflow and deployment practices for Archipelago

2026-02-01 13:24:03 +00:00