copilot-swe-agent[bot]andnaturallaw777
a111de1ece
Security hardening: fix all 8 blocking findings for PR #419
Fix 1: Update support.js to collect SSH public key and POST JSON
Fix 2: Legacy njalla.sh migration - parse safely, archive non-executable, replace cron with systemd timer
Fix 3: DDNS SSRF prevention - allowlist only njal.la, reject other hosts, disable curl redirects
Fix 4: Legacy root support-key removal migration (_remove_legacy_root_support_key)
Fix 5: Automatic support-key expiration (expires_at + _expire_support_if_stale)
Fix 6: Move security helpers to security_helpers.py, tests import production code
Fix 7: Real NIP-19/Bech32 npub validation (_bech32_decode + _validate_npub)
Fix 8: Replace journalctl sudo wildcard with restricted sovran-journal-helper.py
Also: Make _write_hub_overrides() atomic with tempfile+os.replace
94 tests passing
Co-authored-by: naturallaw777 <99053422+naturallaw777@users.noreply.github.com>
2026-08-11 12:07:18 +00:00
..
2026-08-11 03:41:41 +00:00
2026-08-11 12:07:18 +00:00
2026-08-09 20:16:34 -05:00
2026-08-09 20:16:34 -05:00
2026-08-07 12:34:13 -05:00
2026-07-13 18:24:43 +00:00
2026-03-27 17:46:52 -05:00
2026-04-03 15:21:01 +00:00
2026-07-27 02:10:11 +00:00
2026-04-17 13:07:25 +00:00
2026-07-29 02:58:33 +00:00
2026-04-17 13:07:25 +00:00
2026-07-14 15:54:40 +00:00
2026-04-06 18:40:17 -05:00
2026-08-11 03:41:41 +00:00
2026-03-30 19:57:44 -05:00
2026-05-03 22:37:14 +00:00
2026-04-17 15:41:13 +00:00