Tags: CCExtractor/ccsync
Tags
security: add authentication and origin validation to WebSocket (#414) * security: add authentication and origin validation to WebSocket Add session authentication and origin header validation to the WebSocket endpoint to prevent unauthorized access. - Add checkWebSocketOrigin() for origin header validation - Add AuthenticatedWebSocketHandler() requiring valid session - Update main.go to use authenticated handler - Support ALLOWED_ORIGIN and FRONTEND_ORIGIN_DEV env vars - Allow localhost in development mode - Log rejected connections for security monitoring Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> * Fix origin comparison security issue and improve ENV handling Addresses review feedback: 1. Security fix: Replace insecure substring check with proper hostname comparison. Previously `strings.Contains(origin, host)` could be bypassed by an attacker using "malicious-example.com" to match "example.com". Now parses the origin URL and compares hostnames exactly. 2. Add getEnv() helper that returns "development" by default, making the environment check clearer and more maintainable. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
feat: add completion stats to project and tag filters (#385) * feat: add completion stats to project and tag filters - Add calculation functions for project and tag completion stats - Update MultiSelectFilter to display completion percentage - Show completed/total tasks count in filter dropdowns - Calculate stats dynamically when tasks are loaded or synced * feat: add completion stats to project and tag filters - Add calculateProjectStats and calculateTagStats functions - Display completed/total tasks and percentage in filter dropdowns - Update stats dynamically on task changes and sync - Add comprehensive test coverage for new functionality * feat: add completion stats to project and tag filters - Add calculateProjectStats and calculateTagStats functions - Display completed/total tasks and percentage in filter dropdowns - Update stats dynamically on task changes and sync - Add comprehensive test coverage for new functionality
PreviousNext