4 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Cursor Agentandnsrb	9100b1d78b	feat(scripts): add detect-url-changes change-detection step ... Co-authored-by: Nasyarobby Putra <nasyarobby@gmail.com>	2026-08-15 00:37:52 +00:00
Cursor Agentandnsrb	b88dd4d6e7	feat(server): add SQLite KV store exposed as $kv in script sandbox ... Co-authored-by: Nasyarobby Putra <nasyarobby@gmail.com>	2026-08-14 11:11:17 +00:00
Cursor Agentandnsrb	b181bd3414	fix(sandbox): allow localhost in axios URL screening ... Self-hosted automation targets often run on localhost or loopback addresses, so keep blocking private/metadata hosts but stop blocking localhost, 127.x.x.x, and .localhost names. Co-authored-by: Nasyarobby Putra <nasyarobby@gmail.com>	2026-08-14 05:01:45 +00:00
Cursor Agentandnsrb	8c9673444f	feat(sandbox): expose screened $axios in script context ... Add $axios to the VM sandbox with a request interceptor that blocks non-http(s) URLs and common SSRF targets (localhost, private IPs, link-local, and cloud metadata hosts). require('axios') and import axios resolve to the same screened instance so scripts cannot bypass URL screening. Co-authored-by: Nasyarobby Putra <nasyarobby@gmail.com>	2026-08-14 04:56:25 +00:00