Skip to content

Streaming response pipeline, header sanitization, and SSRF hardening #151

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
fifthsegment wants to merge 4 commits into from
Closed

Streaming response pipeline, header sanitization, and SSRF hardening #151

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
f70d63d
Phase 1: Response header sanitization & proxy hardening
jbarwick Feb 10, 2026
a35e979
Phase 2: DNS wiring & SSRF hardening
jbarwick Feb 10, 2026
7d8fc1e
Phase 3: Streaming response pipeline — 3-path content router
jbarwick Feb 10, 2026
b8876db
Bump version to 1.23.0 and update changelog
fifthsegment May 17, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 12 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,17 @@
# CHANGELOG

## v1.23.0 (17 May 2026)

- Streaming response pipeline: 3-path content router (stream / peek+stream / buffer+scan)
- Response header sanitization: Content-Length validation, hop-by-hop removal, X-Content-Type-Options
- SSRF hardening: DNS wiring through GateSentry resolver, loop detection, admin port isolation
- MaxContentScanSize reduced to 2MB default, tunable via GS_MAX_SCAN_SIZE_MB env var

## v1.22.0 (17 May 2026)

- Fixed static file serving: restored CSS/JS assets, added MIME types, fixed vite.svg path
- Restored block page CSS and JS deleted by frontend rebuild

## v1.21.0 (17 May 2026)

- Device discovery service: mDNS/Bonjour browser, passive DNS observation, RFC 2136 DDNS UPDATE support
Expand Down
961 changes: 961 additions & 0 deletions PROXY_SERVICE_UPDATE_PLAN.md
View file
Open in desktop

Large diffs are not rendered by default.

Loading