Shadowbroker/backend/package.json at 91c76ad1bdc1acba141d04050483eac8dfe29034 - Shadowbroker - MS-GitHub-Backup (Gitea)

CalvinBackup/Shadowbroker

mirror of https://github.com/BigBodyCobain/Shadowbroker.git synced 2026-06-19 04:20:15 +02:00

Files

T

Shadowbroker 91c76ad1bd security: agent-shell WS tokens and dependency audit fixes (#409 )

Replace spoofable Host/Origin WebSocket auth with short-lived bootstrap
tokens minted over the existing local-operator HTTP path. Docker/browser
shell sessions prefetch a token before connecting; loopback peers remain
unchanged.

Also bump backend ws to 8.21.0 and refresh frontend lockfile to clear
npm audit findings (dev toolchain only for frontend).

Fixes #405, #406, #407

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-06-18 16:40:36 -06:00

6 lines

48 B

JSON

Raw Blame History

 {
   "dependencies": {
     "ws": "^8.21.0"
   }
 }