Skip to content

v1.5.1 - Security & Stability Fixes

Choose a tag to compare

View all tags
@TechNickAI TechNickAI released this 12 Jan 00:42
· 21 commits to main since this release
v1.5.1
e9d2297

Security & Stability Fixes

Addresses issues identified by Cursor Bugbot code review.

Security

  • WhatsApp service now localhost-only - Binds to 127.0.0.1 instead of 0.0.0.0
    • Prevents unauthorized network access to /api/send endpoint
    • Gateway handles external access with proper bearer token authentication

Bug Fixes

  • Fixed backslash escaping in LIKE queries - escapeSQL now properly escapes backslashes for SQLite LIKE patterns with ESCAPE '\'

  • Fixed database connection leaks - Both queryMessagesDB and queryWhatsAppDB now use try-finally with conditional close to prevent file descriptor leaks on query errors

  • Preserved error message wrapping - Database constructor errors now properly wrapped in user-friendly messages while still preventing connection leaks

Code Quality

All changes validated by Claude Code Review and Cursor Bugbot with no remaining issues.

Assets 2
Loading