sagitchu 77dbd719ed fix(backend): enforce port range in federation runtime commands ...

The federationRuntimeCommand handler forwarded AddService/UpdateService
commands from consumers to provider nodes without validating that the
port in the service payload falls within the share's allowed port range.
This allowed consumers to use any port on shared nodes, bypassing the
provider's port_range_start/port_range_end restrictions.

Add port extraction and validation in federationRuntimeCommand for
service commands, rejecting requests with ports outside the allowed
range with a 403 error.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-15 11:22:50 +08:00

..

cmd/paneld

fix: frontend build errors and dependency issues

2026-02-08 10:45:18 +00:00

internal

fix(backend): enforce port range in federation runtime commands

2026-02-15 11:22:50 +08:00

tests/contract

fix(backend): enforce port range in federation runtime commands

2026-02-15 11:22:50 +08:00

AGENTS.md

chore: rebrand to FLVX and fix docker multi-arch build

2026-02-08 11:50:06 +00:00

Dockerfile

fix(docker): bump Go builder image to 1.24 to match go.mod requirement

2026-02-12 07:11:45 +00:00

go.mod

feat(postgres): add postgres backend support and migration docs

2026-02-12 06:38:25 +00:00

go.sum

feat(postgres): add postgres backend support and migration docs

2026-02-12 06:38:25 +00:00

Makefile

feat: add Go backend compatibility service scaffold

2026-02-06 10:42:48 +00:00