GeneralBots/botserver
2
1
Fork 0
Code Activity Actions
botserver/src/security
History
Rodrigo Rodriguez (Pragmatismo) 7bad8d50f7 Fix designer file writing and CSP for CDN assets 
- Designer now uses state.bucket_name (like app_generator) instead of DB lookup
- Fixed local file path to match app_server fallback: {site_path}/{bot}.gbai/{bot}.gbapp/{app}/{file}
- Fixed S3 path to match app_server: {bot}.gbapp/{app}/{file} in bucket {bot}.gbai
- Added S3 bucket creation retry logic (like app_generator)
- Updated CSP to allow unpkg.com, cdnjs.cloudflare.com, cdn.jsdelivr.net for scripts/styles
- Added fonts.googleapis.com and fonts.gstatic.com for web fonts
- Updated APP_GENERATOR_PROMPT to use HTMX CDN instead of non-existent /js/vendor path
- Added designer prompt guidelines for relative asset paths
2026-01-02 17:48:51 -03:00
..
antivirus.rs Security audit: Remove all production .unwrap()/.expect(), add SafeCommand, ErrorSanitizer 2025-12-28 21:26:08 -03:00
auth.rs feat(security): Complete security infrastructure implementation 2025-12-28 19:29:18 -03:00
ca.rs feat(autotask): Implement AutoTask system with intent classification and app generation 2025-12-27 21:10:09 -03:00
cert_pinning.rs Security audit: Remove all production .unwrap()/.expect(), add SafeCommand, ErrorSanitizer 2025-12-28 21:26:08 -03:00
command_guard.rs Security audit: Remove all production .unwrap()/.expect(), add SafeCommand, ErrorSanitizer 2025-12-28 21:26:08 -03:00
cors.rs feat(security): Complete security wiring and log audit 2025-12-28 19:41:33 -03:00
error_sanitizer.rs feat(security): Complete security infrastructure implementation 2025-12-28 19:29:18 -03:00
headers.rs Fix designer file writing and CSP for CDN assets 2026-01-02 17:48:51 -03:00
integration.rs Fix tasks UI, WebSocket progress, memory monitoring, and app generator 2025-12-30 22:42:32 -03:00
mod.rs feat(security): Complete security wiring and log audit 2025-12-28 19:41:33 -03:00
mutual_tls.rs Remove all code comments and fix ratatui version 2025-12-23 18:40:58 -03:00
panic_handler.rs feat(security): Complete security infrastructure implementation 2025-12-28 19:29:18 -03:00
path_guard.rs feat(security): Complete security infrastructure implementation 2025-12-28 19:29:18 -03:00
rate_limiter.rs feat(security): Complete security infrastructure implementation 2025-12-28 19:29:18 -03:00
request_id.rs feat(security): Complete security infrastructure implementation 2025-12-28 19:29:18 -03:00
secrets.rs feat(security): Complete security infrastructure implementation 2025-12-28 19:29:18 -03:00
sql_guard.rs feat(security): Complete security infrastructure implementation 2025-12-28 19:29:18 -03:00
tls.rs feat(security): Complete security infrastructure implementation 2025-12-28 19:29:18 -03:00
validation.rs feat(security): Complete security infrastructure implementation 2025-12-28 19:29:18 -03:00
zitadel_auth.rs Fix TLS configuration for MinIO, Qdrant, and template structure 2025-12-29 18:21:03 -03:00