BenandClaude Sonnet 4.6 0e8dba2b3d Fix low-severity security issues: headers, body limit, log redaction, telemetry validation ...

- Add X-Content-Type-Options, X-Frame-Options, and Referrer-Policy headers to all responses
- Cap express.json() body to 50kb to prevent memory exhaustion via large payloads
- Redact credentials from MQTT broker URL before logging (ws://user:pass@host pattern)
- Whitelist telemetry event kind field instead of accepting arbitrary strings

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-08 03:44:09 +00:00

..

src

Fix low-severity security issues: headers, body limit, log redaction, telemetry validation

2026-03-08 03:44:09 +00:00

package-lock.json

Support multibyte path hashes across live pathing

2026-03-07 15:51:29 +00:00

package.json

Support multibyte path hashes across live pathing

2026-03-07 15:51:29 +00:00

tsconfig.json

Initial commit

2026-03-03 19:11:05 +00:00