Commit Graph
5 Commits
Author SHA1 Message Date
hotyue d3d59bcfc1 revert: rollback to 784f8d5a - undo security hardening and related fixes 2026-08-10 04:58:16 +00:00
hotyueandhotyue 50cf3f21e6 security: 6-item hardening pass (OTA auth, SQLi, HMAC, SSRF, supply chain, env) (#109)
- #106 Master OTA Telegram callback requires TG_MASTER_TOKEN authentication
- #105 toggle command uses whitelist validation instead of raw SQL concat
- #108 HMAC signature covers all query params (path + sorted params) on both sides
- #107 Remove curl -k, add internal domain SSRF interception (.local/.internal/.nip.io)
- Supply chain: IPS-MAGIC integrity verification for all 6 install modules
- Env: confirmed config.conf/master.conf chmod 600, no .env leak risk

9 files changed, +120/-13 lines

Co-authored-by: hotyue <hotyue@users.noreply.github.com>
2026-08-10 12:22:05 +08:00
hotyue b120302afd refactor(core): 实施全局动态版本嗅探 (SSOT)。彻底移除引导外壳与内部安装链路中硬编码的静态版本号文本,提升 CI/CD 自动化持续集成效率 2026-06-04 06:51:12 +00:00
hotyue 8fa103a62b fix(install): 补全 sqlite3 依赖。修复因模块分离导致的 Master 中枢环境在 Debian/Alpine 等系统下建库静默失败问题 (#87) 2026-06-04 06:28:03 +00:00
hotyue 32ce648f6c feat(arch): 补充基础设施模块 (env_setup.sh),完成 Agent 安装流全组件解耦 2026-06-03 01:25:09 +00:00