Username 1fbb69d7f9 security: implement pentest remediation (RATE-002, CLI-001) ...

RATE-002: Proactive rate limit cleanup when entries exceed threshold
- Add RATE_LIMIT_CLEANUP_THRESHOLD config (default 0.8)
- Trigger cleanup before hitting hard limit
- Prevents memory exhaustion under sustained load

CLI-001: Validate clipboard tool paths against trusted directories
- Add TRUSTED_CLIPBOARD_DIRS for Unix system paths
- Add TRUSTED_WINDOWS_PATTERNS for Windows validation
- Reject tools in user-writable locations (PATH hijack prevention)
- Use absolute paths in subprocess calls

2025-12-24 22:03:17 +01:00

..

__init__.py

feat: add observability and CLI enhancements

2025-12-23 22:39:50 +01:00

routes.py

security: implement pentest remediation (RATE-002, CLI-001)

2025-12-24 22:03:17 +01:00