security: close audit findings 1/2/4/7/9/11 and partially 3/16 - #697

Merged

lidge-jun merged 15 commits into

lidge-jun:devfrom

LeoWang331:security/260728-first-batch

Jul 29, 2026

Commits on Jul 28, 2026

fix(server): reject blank bind hostnames
YourName
committed
9e9d5b2
fix(macos): harden launchctl environment cleanup
YourName
committed
5eafd36
fix(windows): prevent update cwd command hijacking
YourName
committed
0cb9776
test(macos): cover shell-free launchctl injection
YourName
committed
a4adba8
fix(uninstall): remove only manifest-owned config state
YourName
committed
9d8689d
fix(server): deny framing of local responses
YourName
committed
b0c92d0
test(security): align source invariants with hardening
YourName
committed
43b4f65
test(server): exercise real websocket origin rejection
YourName
committed
42bdb1f
fix(config): preserve config on blank persisted hostname
YourName
committed
c2e314e
fix(update): allow npm below trusted cwd ancestors
YourName
committed
7ce68d1
feat(security): split management and data credentials
YourName
committed
c372771
test(oauth): relax live-update timeout
YourName
committed
8e221b5
security: pin provider discovery transports
YourName
committed
64342c9

Commits on Jul 29, 2026

fix(security): honor all outbound proxy variables
YourName
committed
14e1e6b
merge: sync security fixes with dev
YourName
committed
7d995ef