wraith/src-tauri
Vantz Stockwell 17973fc3dc fix: SEC-1/SEC-2 shell escape utility + MCP bearer token auth
- New shell_escape() utility for safe command interpolation
- Applied across all MCP tools, docker, scanner, network commands
- MCP server generates random bearer token at startup
- Token written to mcp-token file with 0600 permissions
- All MCP HTTP requests require Authorization header
- Bridge binary reads token and sends on every request

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-29 16:40:13 -04:00
..
capabilities feat: Help menu + fix tab detach rendering 2026-03-26 14:07:45 -04:00
gen/schemas feat: Help menu + fix tab detach rendering 2026-03-26 14:07:45 -04:00
icons feat: Phase 1 complete — Tauri v2 foundation 2026-03-17 15:09:41 -04:00
src fix: SEC-1/SEC-2 shell escape utility + MCP bearer token auth 2026-03-29 16:40:13 -04:00
windows fix: remove desktop shortcut from NSIS installer by default 2026-03-24 20:04:06 -04:00
build.rs feat: Phase 1 complete — Tauri v2 foundation 2026-03-17 15:09:41 -04:00
Cargo.lock feat: MCP auto-inject + RDP screenshot tool 2026-03-24 23:17:36 -04:00
Cargo.toml feat: network scanner + SFTP context menu + CI fix 2026-03-24 23:56:42 -04:00
installer.nsi.template feat: Local PTY Copilot Panel — replace Gemini stub with real terminal 2026-03-24 20:43:18 -04:00
tauri.conf.json feat: migrate all artifacts to SeaweedFS — single source of truth 2026-03-26 15:52:10 -04:00