Kai (Tam Nhu) TranandGitHub eb4bbfddf3 security(browser-mcp): restrict model-callable local file uploads/downloads to safe roots and deny sensitive paths (#1220) ...

* fix(browser): restrict file transfer paths

* fix(browser): normalize safe transfer paths

* fix(browser): reject sensitive transfer roots

2026-05-12 08:57:33 -04:00

..

issue-900-ui-evidence

fix(dashboard): bootstrap cliproxy control panel session

2026-04-03 02:07:47 -04:00

reports

fix(hardening): handle regex literals in sync-call scanner

2026-02-12 15:01:33 +07:00

system-architecture

feat: deprecate GitHub Copilot compatibility surfaces (#1196)

2026-05-07 13:06:03 -04:00

browser-automation.md

security(browser-mcp): restrict model-callable local file uploads/downloads to safe roots and deny sensitive paths (#1220)

2026-05-12 08:57:33 -04:00

code-standards.md

feat(codex): align ccsxp with native cliproxy shortcut

2026-04-26 11:09:54 -04:00

codebase-summary.md

feat: integrate models.dev pricing metadata

2026-04-28 14:50:26 -04:00

cursor-integration.md

feat(cursor): split legacy bridge from cliproxy provider

2026-04-15 17:04:37 -04:00

dashboard-auth-cli.md

fix(dashboard): show real shared plugin registry state

2026-05-09 03:18:20 -04:00

hardening-debt-burndown.md

fix(hardening): handle regex literals in sync-call scanner

2026-02-12 15:01:33 +07:00

i18n-dashboard.md

fix(ui): finish dashboard i18n follow-up pass

2026-04-13 22:55:13 -04:00

image-analysis.md

docs(image-analysis): update MCP-first behavior docs

2026-04-08 13:36:45 -04:00

logging-contract.md

docs(logging): add structured contract reference and bump Node engines to 18+

2026-04-30 13:01:21 -04:00

openai-compatible-providers.md

fix(proxy): clarify shared port fallback and legacy 3456 handling

2026-04-23 15:00:50 -04:00

project-overview-pdr.md

feat: deprecate GitHub Copilot compatibility surfaces (#1196)

2026-05-07 13:06:03 -04:00

project-roadmap.md

feat(dashboard): add shared resource controls

2026-05-09 02:29:08 -04:00

session-sharing-technical-analysis.md

fix(dashboard): show real shared plugin registry state

2026-05-09 03:18:20 -04:00

websearch.md

fix(websearch): harden searxng url handling

2026-04-12 06:31:20 -04:00