Self-hosted SSH + SFTP + RDP in a browser — MobaXterm replacement
Go to file
Vantz Stockwell 17973fc3dc fix: SEC-1/SEC-2 shell escape utility + MCP bearer token auth
- New shell_escape() utility for safe command interpolation
- Applied across all MCP tools, docker, scanner, network commands
- MCP server generates random bearer token at startup
- Token written to mcp-token file with 0600 permissions
- All MCP HTTP requests require Authorization header
- Bridge binary reads token and sends on every request

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-29 16:40:13 -04:00
.gitea/workflows feat: migrate all artifacts to SeaweedFS — single source of truth 2026-03-26 15:52:10 -04:00
docs feat: MCP Phase 1 — scrollback buffer, terminal_read, terminal_execute 2026-03-24 23:00:32 -04:00
src fix: terminal resize on tab switch + flickering from activity marking 2026-03-26 16:48:43 -04:00
src-tauri fix: SEC-1/SEC-2 shell escape utility + MCP bearer token auth 2026-03-29 16:40:13 -04:00
.gitignore fix: MCP bridge built, signed, and shipped in CI releases 2026-03-25 12:55:17 -04:00
AGENTS.md docs: rename Go reference from ../wraith to ../wraith-go-archive 2026-03-24 22:54:22 -04:00
CLAUDE.md feat: MCP Phase 1 — scrollback buffer, terminal_read, terminal_execute 2026-03-24 23:00:32 -04:00
index.html feat: Phase 1 complete — Tauri v2 foundation 2026-03-17 15:09:41 -04:00
package-lock.json feat: Tauri auto-updater + RDP vault credentials + sidebar persist 2026-03-25 12:42:01 -04:00
package.json feat: Tauri auto-updater + RDP vault credentials + sidebar persist 2026-03-25 12:42:01 -04:00
tsconfig.json feat: Phase 1 complete — Tauri v2 foundation 2026-03-17 15:09:41 -04:00
tsconfig.node.json feat: Phase 1 complete — Tauri v2 foundation 2026-03-17 15:09:41 -04:00
vite.config.ts feat: Phase 1 complete — Tauri v2 foundation 2026-03-17 15:09:41 -04:00