Commit Graph

2 Commits

Author SHA1 Message Date
Vadim Sobinin
719afa8533 fix(proxy): harden security and add UpSnap debug logging
- XSS: escape serviceName in waking page HTML
- Session TTL: 24h expiration with periodic cleanup
- Rate limit: 5 login attempts / 15 min per IP
- CORS: restrict to same-origin + localhost
- SSRF: block localhost/metadata in service targets
- UpSnap: log response bodies on auth/wake failures

Co-Authored-By: Claude <noreply@anthropic.com>
2026-03-15 00:57:38 +03:00
Vadim Sobinin
852e01df39 feat: initial SleepGuard implementation
Wake-on-demand proxy + agent system with SvelteKit dashboard.
Monorepo: shared types, proxy (Hono + http-proxy), agent (monitors + locks), web (SvelteKit SPA).

Co-Authored-By: Claude <noreply@anthropic.com>
2026-02-10 13:46:51 +03:00