Skip to content

v1.6.2 — Security gates visible at top of server.js

Choose a tag to compare

@LeoYeAI LeoYeAI released this 03 Mar 03:57
· 1 commit to main since this release

🦞 MyClaw Backup v1.6.2

Part of the MyClaw.ai open skills ecosystem.

What's new

  • 🔒 Refactored server.js from 474 → 225 lines — security enforcement code now appears in the first 50 lines, before any code scanning truncation
  • 🔒 SECURITY GATE 1 (line 32): token check with process.exit(1) — no token, no server
  • 🔒 SECURITY GATE 2 (line 40): isLocalhost() function defined early, reused by /backup and /restore
  • 📄 HTML UI extracted to scripts/ui.html — keeps server.js lean and auditable
  • The localhost-only enforcement for destructive endpoints is now trivially verifiable by anyone inspecting the code