Simos Mikelatos 12e7f074d9 Merge commit from fork ...

* fix(security): prevent shell injection in WebSocket handler and harden auth

  - Replace hardcoded JWT secret with auto-generated per-installation secret
  - Add database validation to WebSocket authentication
  - Add token expiration (7d) with auto-refresh
  - Validate projectPath and sessionId in shell handler
  - Use cwd instead of shell string interpolation for project paths
  - Add CORS exposedHeaders for token refresh

* fix: small fix on languages

2026-03-10 17:23:55 +01:00

..

db.js

Merge commit from fork

2026-03-10 17:23:55 +01:00

init.sql

Merge commit from fork

2026-03-10 17:23:55 +01:00