9router

nezumi/9router

Fork 0

mirror of https://github.com/Nezumi-2711/9router.git synced 2026-09-23 04:09:49 +00:00

Files

T

History

decoluaandCursor 0c7c9de00a fix(security): re-auth on DB export/import + SSRF guard on web fetch

- /api/settings/database now requires current password (header for GET,
  body for POST) in addition to session; CLI-token requests exempt
- add verifyDashboardPassword helper reusing login bcrypt check
- profile UI prompts password via modal before export/import
- /v1/web/fetch rejects internal/private/metadata targets via assertPublicUrl

Refs GHSA-qvfm-67h2-2qfx, GHSA-qj3v-64wj-q825

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-06-13 11:40:35 +07:00

auth

fix(security): re-auth on DB export/import + SSRF guard on web fetch

2026-06-13 11:40:35 +07:00

feat(providers/codex): bulk add accounts via JSON

2026-06-08 10:08:46 +07:00

mcp

feat(cowork): re-enable Claude Cowork with preset-only stdio MCP

2026-06-08 15:35:37 +07:00

network

feat(proxy-pools): add support for deno deploy relays and fix layout overflow issues in proxy pools dashboard (#1437 )

2026-05-26 11:21:49 +07:00