Skip to content

v0.11.11 — security hardening + SSOT fixes

Choose a tag to compare

View all tags
@helios-code helios-code released this 28 Jun 00:14
· 133 commits to main since this release
v0.11.11
a804a40
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Highlights

  • section-write patches in place — no more silent whole-doc clobber; short doc_id resolves (SSOT data-loss fixed).
  • Security: rate-limit + query-length caps on /search/partial (closes an anon cost-loop), constant-time write-token compare, default bind 127.0.0.1 (opt-in all-interfaces, loud warn).
  • md-guard scoped to the trovex repo (+ SKILL.md exempt) so foreign-repo markdown isn't blocked.
Assets 2
Loading