3 Commits

Include renames

Author	SHA1	Message	Date
decoluaandCursor	0c7c9de00a	fix(security): re-auth on DB export/import + SSRF guard on web fetch ... - /api/settings/database now requires current password (header for GET, body for POST) in addition to session; CLI-token requests exempt - add verifyDashboardPassword helper reusing login bcrypt check - profile UI prompts password via modal before export/import - /v1/web/fetch rejects internal/private/metadata targets via assertPublicUrl Refs GHSA-qvfm-67h2-2qfx, GHSA-qj3v-64wj-q825 Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-13 11:40:35 +07:00
gen	5a015e5b4d	feat(proxy): add outbound HTTP proxy support for OAuth + provider requests ... - Patch Node fetch via undici ProxyAgent when HTTP_PROXY/HTTPS_PROXY/ALL_PROXY is set - Ensure proxy patch is loaded for both chat pipeline and OAuth token exchange - Add Dashboard Settings → Network to edit outbound proxy and apply immediately - Persist outbound proxy settings in local db and initialize on server startup - Move proxy helpers to src/lib/network/ for better structure - Rename src/proxy.js → src/dashboardGuard.js to avoid naming confusion - Re-apply proxy env after DB import - Fix: close old dispatcher on proxy URL change to prevent connection pool leak - Fix: idempotency guard to avoid patching globalThis.fetch multiple times Made-with: Cursor	2026-02-28 10:11:53 +07:00
Mai Trung Tiến	3cf900a0a1	feat: add database backup import/export (#194)	2026-02-25 15:32:38 +07:00