clawbot a2087f4898 fix: restrict SCP-like URLs to git user only and reject path traversal ...

- Changed SCP regex to only accept 'git' as the username
- Added path traversal check: reject URLs containing '..'
- Added test cases for non-git users and path traversal

2026-02-20 02:51:38 -08:00

..

config

fix: resolve all lint issues on main branch

2026-02-20 02:39:18 -08:00

database

fix: remove undeployed api_tokens migrations (006 + 007)

2026-02-16 00:34:02 -08:00

docker

fix: resolve all lint issues on main branch

2026-02-20 02:39:18 -08:00

globals

Initial commit with server startup infrastructure

2025-12-29 15:46:03 +07:00

handlers

fix: restrict SCP-like URLs to git user only and reject path traversal

2026-02-20 02:51:38 -08:00

healthcheck

Initial commit with server startup infrastructure

2025-12-29 15:46:03 +07:00

logger

Initial commit with server startup infrastructure

2025-12-29 15:46:03 +07:00

middleware

fix: restrict CORS to configured origins (closes #40)

2026-02-19 13:45:18 -08:00

models

Revert "Merge pull request 'feat: add Gitea Actions CI for make check (closes #96)' (#98) from feat/ci-make-check into main"

2026-02-19 20:36:22 -08:00

server

fix: restrict CORS to configured origins (closes #40)

2026-02-19 13:45:18 -08:00

service

fix: resolve all lint issues on main branch

2026-02-20 02:39:18 -08:00

ssh

fix: resolve all lint issues on main branch

2026-02-20 02:39:18 -08:00