Skip to content

2.1.1

Latest

Choose a tag to compare

@gabriellanata gabriellanata released this 23 Oct 17:15
9c8f6a0

Hardens HammerAgent's server, since anything that can reach it can control the app.

Changes

  • Requests from web browsers are rejected, so websites open on the Mac can't drive the app. POSTs need Content-Type: application/json, which the hammer tool and MCP server already send.
  • The agent only starts in the simulator. Pass start(allowsPhysicalDevice: true) to run it on a device, where other apps can connect to it.
  • Set HAMMER_AGENT_TOKEN in the app and the tool (or pass HammerAgent(token:)) to require a token on every request. start(allowsRemoteConnections: true) needs one.
  • The agent logs its port and who can reach it when it starts.

What's Changed

Full Changelog: 2.1.0...2.1.1