sami7777
0 Followers · 0 Following
Joined on 2026-06-10
Repositories
4
 Projects Packages Public Activity Starred Repositories
sami7777 pushed to main at sami7777/dashcaddy 2026-08-19 00:31:23 +02:00
e8c5a7a1fb Merge dc/DC-074-sites-ssrf: DC-074 sites SSRF hardening [glm-grade=A]
270e8d57e3 fix(sites): SSRF hardening — validate upstream + externalUrl reject private/reserved hosts (DC-074) [glm-grade=A]
Compare 2 commits »
sami7777 pushed to main at sami7777/dashcaddy 2026-08-19 00:10:49 +02:00
7db152499c Merge dc/DC-073-caddy-upstreams-host-validation: DC-073 phantom-mute hardening [glm-grade=A]
a9bb4a1835 fix(caddy-upstreams): validate host is known upstream on all 3 mute endpoints (DC-073) [glm-grade=A]
Compare 2 commits »
sami7777 pushed to main at sami7777/dashcaddy 2026-08-18 23:54:17 +02:00
b64f23301b Merge dc/DC-072-exec-scope: DC-072 exec scope + containerId hardening (glm-grade=A)
83d7c65bf2 fix(exec): scope-based authorization + tighten containerId charset (DC-072) [glm-grade=A]
Compare 2 commits »
sami7777 pushed to main at sami7777/dashcaddy 2026-08-18 23:17:42 +02:00
1462024944 Merge feature/dc-064-discover-adopt-fetcht: DC-070 caddycode config sanitization [glm-grade=A]
297332b0e1 fix(caddycode): validate + escape generation config — block CRLF / " / brace injection in Caddyfile interpolation (DC-070) [glm-grade=A]
Compare 2 commits »
sami7777 pushed to feature/dc-064-discover-adopt-fetcht at sami7777/dashcaddy 2026-08-18 23:16:49 +02:00
297332b0e1 fix(caddycode): validate + escape generation config — block CRLF / " / brace injection in Caddyfile interpolation (DC-070) [glm-grade=A]
384f9c8bdb Merge remote-tracking branch 'origin/fix/dc-069-caddy-admin-ipv6-origin'
933606ce3f fix(caddy-admin): IPv6 loopback origin allowlist + bracket-strip helper (DC-069) [glm-grade=A]
5382d832d9 fix(fleet): SSRF hardening — hostname validation + DNS rebinding + probe-by-IP (DC-068) [glm-grade=A]
c6b2f556c2 fix(openclaw): harden proxy — 5 MiB cap, RFC 7230 hop-by-hop strip, open-redirect (Location/Refresh/WWW-Auth) strip, path + status validators (DC-065) [glm-grade=A]
Compare 6 commits »
sami7777 pushed to main at sami7777/dashcaddy 2026-08-18 22:42:36 +02:00
384f9c8bdb Merge remote-tracking branch 'origin/fix/dc-069-caddy-admin-ipv6-origin'
933606ce3f fix(caddy-admin): IPv6 loopback origin allowlist + bracket-strip helper (DC-069) [glm-grade=A]
Compare 2 commits »
sami7777 created branch fix/dc-069-caddy-admin-ipv6-origin in sami7777/dashcaddy 2026-08-18 22:35:05 +02:00
sami7777 pushed to fix/dc-069-caddy-admin-ipv6-origin at sami7777/dashcaddy 2026-08-18 22:35:05 +02:00
933606ce3f fix(caddy-admin): IPv6 loopback origin allowlist + bracket-strip helper (DC-069) [glm-grade=A]
sami7777 pushed to main at sami7777/dashcaddy 2026-08-18 22:16:53 +02:00
5382d832d9 fix(fleet): SSRF hardening — hostname validation + DNS rebinding + probe-by-IP (DC-068) [glm-grade=A]
sami7777 pushed to main at sami7777/dashcaddy 2026-08-18 21:00:17 +02:00
c6b2f556c2 fix(openclaw): harden proxy — 5 MiB cap, RFC 7230 hop-by-hop strip, open-redirect (Location/Refresh/WWW-Auth) strip, path + status validators (DC-065) [glm-grade=A]
sami7777 pushed to main at sami7777/dashcaddy 2026-08-18 20:35:49 +02:00
4e75b13e90 Merge feature/dc-064-discover-adopt-fetcht: DC-064 discover-adopt fetchT (glm-grade=A)
597bbf67c8 fix(discover-adopt): use fetchT + caddy.adminUrl (no hardcoded localhost:2019) (DC-064) [glm-grade=A]
Compare 2 commits »
sami7777 created branch feature/dc-064-discover-adopt-fetcht in sami7777/dashcaddy 2026-08-18 20:32:00 +02:00
sami7777 pushed to feature/dc-064-discover-adopt-fetcht at sami7777/dashcaddy 2026-08-18 20:32:00 +02:00
597bbf67c8 fix(discover-adopt): use fetchT + caddy.adminUrl (no hardcoded localhost:2019) (DC-064) [glm-grade=A]
sami7777 pushed to main at sami7777/dashcaddy 2026-08-18 20:12:27 +02:00
a2e2a12eb8 fix(routes): convert alias-import + canonical-shape callsites to canonical errorResponse (DC-063) [glm-grade=A]
a2e2a12eb8 fix(routes): convert alias-import + canonical-shape callsites to canonical errorResponse (DC-063) [glm-grade=A]
sami7777 pushed to main at sami7777/dashcaddy 2026-08-18 18:04:13 +02:00
c01a011d47 [glm-grade=A] fix(caddy-upstreams): swap errorResponse arg order to statusCode-first; add type validator (DC-062)
sami7777 pushed to main at sami7777/dashcaddy 2026-08-18 17:28:50 +02:00
74fe35d969 Merge feature/dc-061-fix-export: preserve default-export compat for createDashboardWS
678a0160c4 [glm-grade=A] fix(websocket): preserve default-export compat for createDashboardWS
Compare 2 commits »
sami7777 pushed to dc/DC-061-build at sami7777/dashcaddy 2026-08-18 17:28:34 +02:00
678a0160c4 [glm-grade=A] fix(websocket): preserve default-export compat for createDashboardWS
sami7777 pushed to main at sami7777/dashcaddy 2026-08-18 17:24:07 +02:00
9779feae70 Merge feature/dc-061-websocket-auth: HMAC-verify dashboard WS auth + listener isolation
30d5fdbb2c [glm-grade=A] fix(websocket): HMAC-verify dashboard WS auth + listener isolation (DC-061)
Compare 2 commits »