sagitchu 77dbd719ed fix(backend): enforce port range in federation runtime commands ...

The federationRuntimeCommand handler forwarded AddService/UpdateService
commands from consumers to provider nodes without validating that the
port in the service payload falls within the share's allowed port range.
This allowed consumers to use any port on shared nodes, bypassing the
provider's port_range_start/port_range_end restrictions.

Add port extraction and validation in federationRuntimeCommand for
service commands, rejecting requests with ports outside the allowed
range with a 403 error.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-15 11:22:50 +08:00

..

app

feat(postgres): add postgres backend support and migration docs

2026-02-12 06:38:25 +00:00

auth

feat: add Go backend compatibility service scaffold

2026-02-06 10:42:48 +00:00

config

fix(tunnel): auto-update entry node IP on every tunnel update

2026-02-13 01:24:48 +00:00

http

fix(backend): enforce port range in federation runtime commands

2026-02-15 11:22:50 +08:00

security

feat: add Go backend compatibility service scaffold

2026-02-06 10:42:48 +00:00

store

fix(backend): include forward_port in backup export/import

2026-02-15 01:44:57 +00:00

ws

fix(ws): prevent monitor websocket reconnect loop

2026-02-12 04:25:47 +00:00