Skip to content

v0.35.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 31 Aug 13:39
· 5 commits to main since this release
v0.35.2
118af8e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security

  • Hardened dashboard origin validation and reverse-proxy access with same-origin provenance enforcement that defends against DNS rebinding, form/header smuggling, and cross-origin requests. Reverse-proxied origins now require exact HTTPS allowlisting and generated token authentication, while tokenless IPv4 and IPv6 loopback access remains supported. Dashboard options are validated strictly, and CLI and MCP lifecycle behavior is aligned (#1738)

Bug Fixes

  • Fixed root remote CDP WebSocket URLs with query strings to insert the required slash before the query while preserving the encoded query (#1735)

Contributors

Contributors

ctate and Railly
Assets 9
Loading