4 Commits

Author	SHA1	Message	Date
Brian Mendonca	5a64f6d766	Gateway/Security: protect /api/channels plugin root	2026-02-24 23:44:32 +00:00
Peter Steinberger	9af3ec92a5	fix(gateway): add HSTS header hardening and docs	2026-02-23 19:47:29 +00:00
Peter Steinberger	93ca0ed54f	refactor(channels): dedupe transport and gateway test scaffolds	2026-02-16 14:59:31 +00:00
Coy Geek	647d929c9d	fix: Unauthenticated Nostr profile API allows remote config tampering (#13719) ... * fix(an-07): apply security fix Generated by staged fix workflow. * fix(an-07): apply security fix Generated by staged fix workflow. * fix(an-07): satisfy lint in plugin auth regression test Replace unsafe unknown-to-string coercion in the gateway plugin auth test helper with explicit string/null/JSON handling so pnpm check passes.	2026-02-12 07:55:22 -06:00