Vadim Sobinin 719afa8533 fix(proxy): harden security and add UpSnap debug logging ...

- XSS: escape serviceName in waking page HTML
- Session TTL: 24h expiration with periodic cleanup
- Rate limit: 5 login attempts / 15 min per IP
- CORS: restrict to same-origin + localhost
- SSRF: block localhost/metadata in service targets
- UpSnap: log response bodies on auth/wake failures

Co-Authored-By: Claude <noreply@anthropic.com>

2026-03-15 00:57:38 +03:00

..

architecture.md

fix(proxy): harden security and add UpSnap debug logging

2026-03-15 00:57:38 +03:00