Skip to content

Direct v0.7.29

Choose a tag to compare

View all tags
@github-actions github-actions released this 04 Oct 22:48
Immutable release. Only release title and notes can be modified.
v0.7.29
ffb2de9
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

The semantic browser proxy now chooses outgoing network destinations only from the approved origins configured by its owner.

Changes

  • Read the outgoing HTTP(S) and CONNECT host, port, and protocol from the approved origin, not the browser request; forward only the validated request path and query.
  • Verify that a double-slash path and a conflicting Host header cannot change the destination. Keep foreign-origin denials, HTTPS handling, and cleanup unchanged.

Install

Install this version from its GitHub Release archive with Bun:

bun add --dev https://github.com/hraness/direct/releases/download/v0.7.29/hraness-direct-0.7.29.tgz

Or install the same package from the npm mirror:

bun add --dev @hraness/direct@0.7.29

Verify

SHA256SUMS lists the SHA-256 of hraness-direct-0.7.29.tgz, npm-pack.json, and release-manifest.json. provenance.jsonl holds the signed build provenance for those files and SHA256SUMS.

To check the checksums and provenance, follow the publishing guide for v0.7.29.

Assets 8
Loading