Commit Graph

3 Commits

Author SHA1 Message Date
Cyl
9e5b95468e fix(security): harden SSH target handling to prevent argument injection
- Add hostname validation to reject targets starting with '-'
- Add '--' delimiter before destination to prevent option injection
- Prevents DoS via mDNS poisoning with malicious hostnames

Fixes CWE-88 (Argument Injection)
2026-01-29 21:58:02 +08:00
Peter Steinberger
c379191f80 chore: migrate to oxlint and oxfmt
Co-authored-by: Christoph Nakazawa <christoph.pojer@gmail.com>
2026-01-14 15:02:19 +00:00
Peter Steinberger
d258c68ca1 feat: add gateway dev config options 2026-01-09 10:39:00 +01:00