Shadowbroker

CalvinBackup/Shadowbroker

Fork 0

mirror of https://github.com/BigBodyCobain/Shadowbroker.git synced 2026-08-19 00:47:22 +02:00

Commit Graph

Author	SHA1	Message	Date
Shadowbroker	7afa085d44	fix(security): bound agent shell token store without deadlock	2026-08-17 01:05:12 -06:00
ShadowbrokerandCursor	91c76ad1bd	security: agent-shell WS tokens and dependency audit fixes (#409 ) Replace spoofable Host/Origin WebSocket auth with short-lived bootstrap tokens minted over the existing local-operator HTTP path. Docker/browser shell sessions prefetch a token before connecting; loopback peers remain unchanged. Also bump backend ws to 8.21.0 and refresh frontend lockfile to clear npm audit findings (dev toolchain only for frontend). Fixes #405, #406, #407 Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-18 16:40:36 -06:00

Author

SHA1

Message

Date

Shadowbroker

7afa085d44

fix(security): bound agent shell token store without deadlock

2026-08-17 01:05:12 -06:00

ShadowbrokerandCursor

91c76ad1bd

security: agent-shell WS tokens and dependency audit fixes (#409 )

Replace spoofable Host/Origin WebSocket auth with short-lived bootstrap
tokens minted over the existing local-operator HTTP path. Docker/browser
shell sessions prefetch a token before connecting; loopback peers remain
unchanged.

Also bump backend ws to 8.21.0 and refresh frontend lockfile to clear
npm audit findings (dev toolchain only for frontend).

Fixes #405, #406, #407

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-06-18 16:40:36 -06:00