Shadowbroker 9ef6213284 Fix #250: bind Docker bridge local-operator trust to frontend hostname (#278) ...

Tightens the bridge-trust check so a connection on the Docker bridge
is only granted local-operator status when its source IP matches a
configured frontend container hostname (default: `frontend` + the
shipped `container_name` `shadowbroker-frontend`). Previously, when
`SHADOWBROKER_TRUST_DOCKER_BRIDGE_LOCAL_OPERATOR=1` was set, ANY IP
in the 172.16.0.0/12 range was granted local-operator privileges —
on a shared Docker host that included any unrelated container on the
same bridge.

Operators with renamed services can list new hostnames via the new
`SHADOWBROKER_TRUSTED_FRONTEND_HOSTS` env var (comma-separated). DNS
resolution is cached for 30s; if Docker DNS can't resolve any of the
configured names we fail closed and refuse the bridge entirely.

Single-user installs see no behavior change — the default-named
frontend container still resolves and is still trusted.

Credit: tg12 (external security audit)

2026-05-21 02:06:11 -06:00

..

config

Stabilize Docker startup and runtime proxy

2026-05-04 12:37:23 -06:00

data

Fix #231: multi-source SHA-256 verification for the self-updater (#265)

2026-05-21 01:31:20 -06:00

routers

Fix #258: AIS proxy SPKI pinning fallback for expired upstream cert (#262)

2026-05-20 20:31:56 -06:00

scripts

release: prepare v0.9.7

2026-05-01 22:56:50 -06:00

services

Fix #251: refuse symlink/hardlink members during Tor bundle extraction (#277)

2026-05-21 01:41:13 -06:00

tests

Fix #250: bind Docker bridge local-operator trust to frontend hostname (#278)

2026-05-21 02:06:11 -06:00

.dockerignore

v0.9.0: in-app auto-updater, ship toggle split, stable entity IDs, performance fixes

2026-03-13 11:32:16 -06:00

.env.example

[security] Close tg12 audit issues #201–#214 seamlessly (#261)

2026-05-20 19:57:06 -06:00

ais_proxy.js

Fix #258: AIS proxy SPKI pinning fallback for expired upstream cert (#262)

2026-05-20 20:31:56 -06:00

auth.py

Fix #250: bind Docker bridge local-operator trust to frontend hostname (#278)

2026-05-21 02:06:11 -06:00

docker-entrypoint.sh

Release v0.9.79 runtime and messaging update

2026-05-12 11:49:46 -06:00

Dockerfile

Release v0.9.75 runtime and onboarding update

2026-05-06 01:15:54 -06:00

gate_sse.py

release: prepare v0.9.7

2026-05-01 22:56:50 -06:00

limiter.py

release: prepare v0.9.7

2026-05-01 22:56:50 -06:00

main.py

Harden infonet control surfaces

2026-05-18 11:22:38 -06:00

node_state.py

Harden v0.9.75 wormhole node sync and telemetry panels

2026-05-06 14:04:16 -06:00

package-lock.json

Initial commit: ShadowBroker v0.1

2026-03-04 22:44:08 -07:00

package.json

Initial commit: ShadowBroker v0.1

2026-03-04 22:44:08 -07:00

pyproject.toml

fix(security): use defusedxml for untrusted XML parsing (#259)

2026-05-20 20:01:25 -06:00

pytest.ini

v0.9.6: InfoNet hashchain, Wormhole gate encryption, mesh reputation, 16 community contributors

2026-03-26 05:58:04 -06:00

wormhole_server.py

v0.9.6: InfoNet hashchain, Wormhole gate encryption, mesh reputation, 16 community contributors

2026-03-26 05:58:04 -06:00