openclaw/src/security
Nick Taylor ff21505296
feat(security): add audit findings for trusted-proxy mode
- Add critical finding when trusted-proxy auth is enabled
- Flag missing trustedProxies configuration
- Flag missing userHeader configuration
- Warn when allowUsers is empty (allows any authenticated user)

Part of #1560

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-01-26 02:19:22 +00:00
..
audit-extra.ts fix: honor gateway env token for doctor/security 2026-01-23 03:16:52 +00:00
audit-fs.ts test: fix Windows security audit perms 2026-01-15 06:04:39 +00:00
audit.test.ts fix: tighten security audit for loopback auth 2026-01-25 15:16:40 +00:00
audit.ts feat(security): add audit findings for trusted-proxy mode 2026-01-26 02:19:22 +00:00
fix.test.ts test: fix Windows security audit perms 2026-01-15 06:04:39 +00:00
fix.ts test: fix Windows security audit perms 2026-01-15 06:04:39 +00:00