Skip to content

v0.3.0 — Security & quality hardening

Choose a tag to compare

View all tags
@maksugr maksugr released this 13 Jun 16:08
· 7 commits to main since this release
v0.3.0
e2e3833
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security and quality hardening.

  • diff and session-info redact auth headers and proxy tokens by default; pass --raw to opt out.
  • The HTTP API and the /replay/:id WebSocket validate the Host header (DNS-rebinding protection); a custom --host bind is allowlisted explicitly.
  • Session listing filters (--client, --imported) run in SQL instead of post-filtering.
Assets 2
Loading