[audit] Harden plugin route patterns, i18n keys, and container user - #500

Closed

BillyOutlast wants to merge 256 commits into

Drop-OSS:developfrom

Heretek-Games:fix/semgrep-core-findings

This pull request is big! We're only showing the most recent 250 commits

Commits on Aug 26, 2026

fix(security): resolve residual CodeQL alerts

John Smith
and
claude
committed
50c0ca8
fix(security): strip residual '<' after entity decoding in Steam metadata

John Smith
and
claude
committed
d85c666
fix(security): make Steam HTML sanitizer unable to emit angle brackets

John Smith
and
claude
committed
f0dfdaf
fix(ci): resolve lint errors and Security workflow failures

John Smith
and
claude
committed
6f05ddc
fix(security): remove angle brackets by character instead of tag matching

John Smith
and
claude
committed
73e51d5
chore(deps): bump the cargo group across 1 directory with 2 updates (#3)
dependabot[bot]
authored
754932c

Commits on Aug 28, 2026

Remediate all 680 SonarCloud issues for Heretek-AI_drop2 (#5)

BillyOutlast
and
John Smith
authored
342d15b

Commits on Sep 13, 2026

Merge upstream Drop-OSS/drop develop into fork
John Smith
committed
c20e1d1
chore: reconcile GitHub Actions SHA pinning, knip CI job, and Prisma Dockerfile alignment
John Smith
committed
91f25da
fix(toolchain): specify ./core/... module path for golangci-lint in pre-push hook
John Smith
committed
dfe6d04
feat(desktop): fix 4K scaling bug, add WinGet/Flatpak distribution, and introduce LaunchInterceptor
John Smith
committed
6f912c9
feat(plugins): implement Server Plugin SPI, Drop GSE room coordinator, and desktop multiplayer integration
John Smith
committed
af65632
feat(plugins): implement dynamic plugin discovery, state persistence, capability sandboxing, and Settings UI
John Smith
committed
58ed891
fix(ci): correct job dependency and environment context in client-release workflow
John Smith
committed
b076e12
docs: add GEMINI.md developer and AI agent architecture guide
John Smith
committed
99b6462
feat(library): add automated game distribution pipeline and recipe engine
John Smith
committed
b05808f
fix(ci): ensure REGISTRY_IMAGE is lowercase in server-release workflow
John Smith
committed
da21865
feat(desktop): add native pipeline runner and setup progress UI
John Smith
committed
bcff6ed
feat(server): add bulk auto-import discovery and admin review UI
John Smith
committed
8f1514b
feat(torrential): add opt-in content-addressed chunk cache
John Smith
committed
d670c50
docs: add canonical AGENTS.md and align CLAUDE.md/GEMINI.md
John Smith
committed
252aed2
fix(cli): migrate to opendal 0.58 API and remove dead code
John Smith
committed
ad74f03
fix(torrential): repair and slim the chunk-cache benchmark
John Smith
committed
ec09e55
refactor(server): remove dead code and unused dependencies
John Smith
committed
77f7ca6
fix(desktop): resolve GameStatus type errors and nuxt config typing
John Smith
committed
cb56fe5
chore(rust): clear clippy warnings in droplet, libarchive, native_model
John Smith
committed
fb688ec
build(torrential): generate protobuf into OUT_DIR and exclude it from lints
John Smith
committed
d6163d7
fix(torrential): harden chunk serving, cache fallback, and RPC handling
John Smith
committed
7d8d4e5
chore(security): add cargo-deny policy and CI, run torrential clippy in CI
John Smith
committed
f4a31a8
Merge pull request #2 from Heretek-Games/torrential/static-analysis-remediation
BillyOutlast
authored
57d8587
chore(deps): drop stale client Cargo.lock
John Smith
committed
0a0f8a9
chore(deps): refresh pnpm overrides for vulnerable transitive deps
John Smith
committed
50f7bf5
fix(desktop): stop logging sensitive cert and save paths
John Smith
committed
5adff09
fix(desktop): enable uuid v4 feature for cloud_saves
John Smith
committed
21f82df
fix(deps): constrain brace-expansion override to 1.x
John Smith
committed
6ce2972
feat(plugins): testable manager, server test runner, frozen A<->B contract
John Smith
committed
a8b96a4
feat(plugins): versioned contract, fail-closed capabilities, storage migrations
John Smith
committed
46a9f77
feat(gse): add gse-engine crate and engine-backed launch interceptor
John Smith
committed
9590d4b
feat(gse): opt-in launch interceptor and startup crash recovery
John Smith
committed
b5f517e
feat(gse): durable room store, mesh backends, ZeroTier provisioning
John Smith
committed
3c8e11f
feat(gse): mesh address assignment, Tailscale backend, client credential flow
John Smith
committed
85fb8de
feat(plugins): bundle integrity verification and hello-world reference plugin
John Smith
committed
bd08be7
feat(plugins): bundle signing tool, sample bundle, and ABI decision (M5/P6)
John Smith
committed
9b6c787
feat(gse): ZeroTier member authorization and network teardown (M3 B4)
John Smith
committed
a21ff97
feat(gse): AppID pinning, compatibility registry, and consent UI (M2 A9/A10)
John Smith
committed
b83a01f
feat(plugins): WebSocket plugin API and credential rotation (B3, P2 websocket)
John Smith
committed
db2fe2d
feat(gse): live WebSocket room updates in the client (M4 B8)
John Smith
committed
a60758d
feat(plugins): install/remove bundles, admin docs, license review (M5)
John Smith
committed
7d2d3fd
feat(gse): transport-agnostic release fetch in the engine (A6)
John Smith
committed
f1413c0
feat(gse): apply staged emulator payload in the interceptor (M1 A2)
John Smith
committed
d6a78e5
feat(plugins): registry allow-list and version pinning (M5)
John Smith
committed
47d30b3
docs(gse): refresh implementation status summary
John Smith
committed
cc3ed6c
feat(desktop): install/remove plugin bundles from Settings (M5)
John Smith
committed
af0eb58
feat(gse): client mesh-readiness validator (M3 B6)
John Smith
committed
f1e65a7
feat(gse): runtime emulator release download (M1 A6)
John Smith
committed
de4de3f
feat(gse): Tailscale API provisioner and backend selection (M4 B5)
John Smith
committed
4ccb106
feat(gse): durable Prisma-backed room persistence (M3 B2)
John Smith
committed
ac0bd6a
feat(gse): authenticated WebSocket credential distribution (M3 B3)
John Smith
committed
57991ac
test(gse): Prisma room-store integration check + verified against Postgres
John Smith
committed
96e05d4
feat(gse): ZTNET controller backend as the default mesh path (M3 B4)
John Smith
committed
3af2fbd
feat(gse): ZTNET compose overlay and integration check
John Smith
committed
6056724
feat(gse): client ZeroTier join/leave and ZTNET docs (M3 B6)
John Smith
committed
1467793
fix(gse): deterministic ZTNET member addresses + E2E bootstrap
John Smith
committed
72417f8
ci: add ZTNET controller E2E job
John Smith
committed
268348a
docs: cover drop-gse multiplayer and ZTNET
John Smith
committed
a6be51e
fix(gse): authorize ZeroTier members end-to-end
John Smith
committed
eeaf891
fix(gse): make mesh authorization restart-safe
John Smith
committed
0879229
fix(gse): report the server mesh backend and drop the inert selector
John Smith
committed
d219c59
fix(gse): pin release origin and honor the room emulator flavor
John Smith
committed
d952667
fix(gse): harden backend selection, room store and discovery
John Smith
committed
2eebb4d
fix(gse): validate persisted payloads, expose self address, add route e2e
John Smith
committed
6985c08
fix(plugins): authenticate desktop JWTs on plugin routes and websocket
John Smith
committed
22b4c02
fix(library): embed pipeline recipes in string droplet manifests
John Smith
committed
72ba18e
fix(desktop): materialize generated setup scripts before legacy fallback
John Smith
committed
760e5a3
ci(gse): run the ZTNET E2E check from the server workspace
John Smith
committed
0d51973
fix(gse): validate room input, redact leave broadcasts, encode mesh URLs
John Smith
committed
3acf4b7
fix(plugins): fail-closed capabilities, safe bundle paths, cached-code invalidation
John Smith
committed
32cc0d8
fix(import): make bulk import idempotent and stop fabricating launch targets
John Smith
committed
eff9645
fix(torrential): validate cache keys and verify chunks before caching
John Smith
committed
4052d9d
fix(plugins): require auth for sensitive WS subscriptions and bound peer state
John Smith
committed
9b8bb7f
fix(gse): never record patched bytes as the original binary
John Smith
committed
f63b3ac
fix(desktop): confine recipe paths and escape cleanup globs
John Smith
committed
7b946eb
fix(gse): restore nested targets and clear the room marker on crash recovery
John Smith
committed
d4b8147
fix(plugins): require apiVersion and authenticate the plugin inventory
John Smith
committed
1d2e195
fix(ci): restore job-scoped WINGET_TOKEN env
John Smith
committed
3118de6
fix(torrential): bound in-flight cache fills by the configured budget
John Smith
committed
f911d37
fix(desktop): make pipeline cancellation responsive
John Smith
committed
75aa82a
docs: document cache defaults/verification, refresh GSE status, dedupe overrides
John Smith
committed
8f20019
fix(gse): preserve pre-existing emulator config across launches
John Smith
committed
1c7b9d6
fix(security): harden session cookies and reject cross-site plugin sockets
John Smith
committed
ec2fd3b
docs: align AGENTS.md with the hardened plugin, pipeline and cache contracts
John Smith
committed
458bce5
fix(security): support forwarded-host in plugin sockets and scope session cookie deletion
John Smith
committed
4f30220
chore(desktop): disable nuxt telemetry in desktop main
John Smith
committed
9293395
feat(flatpak): add dual-track FlatPark publishing for stable and alpha channels
John Smith
committed
33fbc34
chore(flatpak): pin live alpha build 0.4.0-alpha.1.33fbc34 and allow non-blocking webhook during onboarding
John Smith
committed
4bcd560
feat(server): add generic Podman Quadlet deployment template
John Smith
committed
af06c80
fix(server): eliminate file descriptor double-close and stream leaks in object storage
John Smith
committed
71f877f
fix(server): repair age-rating migration drift
John Smith
committed
7adf9c5
fix(ci): read server version from server/package.json
John Smith
committed
d4aec4c
fix(server): correct community page title
John Smith
committed
0e37f5b
fix(torrential): apply rustfmt to cache benchmark
John Smith
committed
36407e2
fix(ci): least-privilege permissions and optional macOS signing
John Smith
committed
b5893b3
chore(knip): reduce false positives and cover desktop/main
John Smith
committed
f61b698
chore: remove unreferenced dead code
John Smith
committed
9e5f550
chore(deps): remove unused deps and declare @vueuse/core
John Smith
committed
589cb1f
chore(ci): add report-only static-analysis workflow
John Smith
committed
f3ca789
fix(server): handle object manifests and await signout
John Smith
committed
1833c67
chore(ci): add cargo-machete report-only job
John Smith
committed
803c8ba
chore(ci): pin analysis tools and bump Go to 1.26.6
John Smith
committed
2d34bc0
fix(ci): resolve actionlint and zizmor findings
John Smith
committed
e701458
chore(deps): remove unused Rust dependencies
John Smith
committed
b0c4a4f
fix(scripts): resolve shellcheck and hadolint findings
John Smith
committed
9f65cee
fix(ci): avoid unpinned-install Sonar findings
John Smith
committed
6a8dba2
Merge pull request #3 from Heretek-Games/fix/age-rating-migration-drift
BillyOutlast
authored
4d0c75a
Merge pull request #5 from Heretek-Games/chore/static-analysis-cleanup
BillyOutlast
authored
18fc99e
fix(desktop): confine GSE/pipeline writes and gate cleanup
John Smith
committed
05585ab
fix(torrential): authenticate RPC, evict responses, bound cache
John Smith
committed
ddf68bc
fix(server): harden drop-gse room membership and lifecycle
John Smith
committed
79d91d1
fix(server): authenticate plugin WS and verify whole bundles
John Smith
committed
d840a34
fix(server): correct bulk-import counting and discovery edges
John Smith
committed
f3233d5
fix(server): stop logging the setup token in cleartext
John Smith
committed
df945c6
fix(server): resolve SonarCloud findings on PR #16
John Smith
committed
4bab38c
fix(server): clear remaining SonarCloud findings in sign-plugin
John Smith
committed
26eb188
fix(server): place NOSONAR on the readdir sink line
John Smith
committed
2699f09
Merge pull request #16 from Heretek-Games/fix/fork-review-remediation
BillyOutlast
authored
078221f
ci: pin actions, lock dependency installs and enforce HTTPS downloads
John Smith
committed
56ef579
fix: resolve remaining SonarCloud security, bug and complexity findings
John Smith
committed
487d216
fix: clear SonarCloud style backlog across server and client
John Smith
committed
d6be999
fix: clear final SonarCloud findings
John Smith
committed
c02399a
fix: clear last SonarCloud findings
John Smith
committed
aa636cc
fix(server): widen WebSocketPeer request type to match crossws UpgradeRequest
John Smith
committed
db9cce4
chore: add mise toolchain, commitlint, ruff and hardened git hooks
John Smith
committed
1c3695e
refactor(server): add Sonar-equivalent eslint rules and fix findings
John Smith
committed
a0311df
chore: extend eslint coverage to every workspace
John Smith
committed
6b58dfd
chore: add agent quality integrations and CI lint jobs
John Smith
committed
356a4cb
chore: install rustfmt and clippy with the pinned rust toolchain
John Smith
committed
a9eeca9
fix(quality): address review findings on the tooling overhaul
John Smith
committed
9af1a38
fix(ci): pass base ref via env to avoid template injection
John Smith
committed
4224bca
Merge pull request #54 from Heretek-Games/chore/quality-tooling
BillyOutlast
authored
1fbcec0
docs: link sister repositories and clarify multi-repo workspace boundaries
John Smith
committed
5e8de2c
refactor: decouple GSE and ZeroTier subsystems
John Smith
committed
94bbdc4
chore: merge feat/decouple-gse-zerotier into develop
John Smith
committed
f362b17
feat(plugins): implement client runtime, play actions, and launch pipeline
John Smith
committed
500548b
chore(ci): remove obsolete ztnet e2e workflow
John Smith
committed
5c6ed2f

Commits on Sep 14, 2026

feat(plugins): support multi-file bundle and .dropplugin archive install
John Smith
committed
398eb65
test(droplet): assert UTF-8 BOM survives manifest generation
John Smith
committed
00931c8
feat(process): run admin setup installers in order after the base recipe
John Smith
committed
9a847bb
feat: game uninstallers, HTML launches, and launch diagnostics
John Smith
committed
3001341
chore: merge develop into feat/issue6-launch-gaps
John Smith
committed
8ec1de4
feat(plugins): add capability review modal before bundle install
John Smith
committed
05bf69c
feat(plugins): support remote registry url, install-by-url, and update checks
John Smith
committed
eba6c86
Merge pull request #60 from Heretek-Games/feat/issue6-launch-gaps
BillyOutlast
authored
0c05871
feat(plugins): add client serverRequest proxy and generic extension prompt
John Smith
committed
15d708f
feat(dist): add Ubuntu PPA + Fedora COPR publishing
John Smith
committed
4f33488
docs(dist): use droposs Launchpad and heretek-ai COPR namespaces
John Smith
committed
eb19e6d
feat(plugins): add client system:command native command capability
John Smith
committed
4ac9637
refactor(dist): publish PPA via yuezk/publish-ppa-package
John Smith
committed
bb561ea
refactor(deploy): stop bundling ZTNET; delegate mesh to the drop-zerotier plugin
John Smith
committed
d95ac55
feat(plugins): fail closed on system:command without a commands allowlist
John Smith
committed
aeff582
fix(dist): extract drop-app from Tauri deb without leading ./
John Smith
committed
bdde5f1
Merge pull request #61 from Heretek-Games/fix/dist-deb-binary-extraction
BillyOutlast
authored
dd9331b
fix: address SonarCloud findings (dist scripts, plugins)
John Smith
committed
ff3871b
fix(plugins): isolate plugin storage from bundle directory and harden Tauri native command registry
John Smith
committed
e8a6464
feat(plugins): dynamic public websocket channels, web admin UI, and upstream compatibility tests
John Smith
committed
1aaa2f0
feat(plugins): implement MetadataProvider and PaymentGateway SPI extensions and publish boundary plan
John Smith
committed
795f61c
fix(plugins): add collision guards, input validation, desktop SPI runtime and overlay slots
John Smith
committed
585de88
fix(server): use typed vue3-carousel-nuxt config key in nuxt.config.ts
John Smith
committed
28ac0f1
feat(cloud-saves): add Ludusavi lifecycle sync, testable save manager, and UI scaffolding
John Smith
committed
44e4ef8
fix(desktop): use buttons for conflict selection to satisfy a11y lint
John Smith
committed
b45d899
feat(plugins): add CloudSavePathResolver SPI to core server and desktop client
John Smith
committed
885bc3d
refactor(desktop): extract plugin-ownership purge helper to satisfy complexity lint
John Smith
committed
aa429cc
feat(cloud-saves): sync Ludusavi snapshots to the Drop server end-to-end
John Smith
committed
9a511fb
feat(delivery): add downpour push CDN chunker and LAN peer discovery contract (#17)
John Smith
committed
dad16ed
fix(delivery): satisfy clippy for LAN scoring and push chunk helper
John Smith
committed
8ce486f
feat(input): add Drop Input mapping core and Big Picture shell (#18)
John Smith
committed
d22e494
feat(achievements): add achievement/leaderboard models, unlock API, and event bus (#8)
John Smith
committed
11abf3e
feat(community): add verified playtime reviews and Ed25519 purchase receipts (#20/#21)
John Smith
committed
cbb419f
feat(community): add desktop community reviews page and fetch command
John Smith
committed
67892a8
docs(upstream): add PR 1 platform-stability and PR 2 generic-SPI scope
John Smith
committed
536e63a
docs(roadmap): record per-issue completion status and verification evidence
John Smith
committed
1f04a51
refactor(metadata): consume plugin MetadataProvider SPI and externalize PCGamingWiki (#310)
John Smith
committed
775c2f0
feat(cloud-saves): consume CloudSaveProvider resolver SPI in the server save path
John Smith
committed
2a76fdf
feat(cloud-saves): provision managed Ludusavi into <data>/tools/ludusavi
John Smith
committed
f8d57ce
feat(delivery): add shader-cache discovery hook and desktop export commands (#17)
John Smith
committed
bbdc7a2
feat(lan): add SSDP peer discovery backend with loopback test (#17)
John Smith
committed
c6f511f
feat(lan): add client-to-client chunk fetch contract (#17)
John Smith
committed
8ef8291
feat(commerce): dispatch payment webhooks and wire store-scanner imports (#21)
John Smith
committed
49f2f61
feat(achievements): add desktop unlock toasts for drop:achievement:unlock (#8)
John Smith
committed
e4f1eff
feat(achievements): add unlock_achievements Tauri command for plugin bridges (#8)
John Smith
committed
58706fb
feat(input): report platform backend availability and fail explicitly when absent (#18)
John Smith
committed
d81df27
feat(lan): add HTTP client-to-client chunk fetcher with tested URL builder (#17)
John Smith
committed
b6e8932
feat(cli): upload packaged depots to memory/S3 via opendal (#407)
John Smith
committed
33a9417
feat(achievements): mount unlock toasts in the desktop app shell
John Smith
committed
a7b079f
docs(roadmap): update completion status, evidence, and hard blockers
John Smith
committed
44bc25f
feat(store-import): add desktop page driving the StoreScanner SPI
John Smith
committed
0ef75a6
fix(desktop): resolve typecheck errors in client plugin manager
John Smith
committed
53930c3
ci(analysis): keep knip report running when typecheck fails
John Smith
committed
8c42565
fix(process): sweep symlink escapes after archive extraction
John Smith
committed
59cccd1
chore(security): run cargo-deny over every Rust crate
John Smith
committed
e7c1786
fix(server): clear the session cookie when a session expires
John Smith
committed
41a7eab
fix(server): require explicit opt-in to overwrite objects
John Smith
committed
4264a59
fix(server): make update checks ETag-aware and rate-limit tolerant
John Smith
committed
1b6df12
fix(cloud_saves): skip unreadable save paths instead of panicking
John Smith
committed
b72dc0f
fix(input): report only implemented virtual-gamepad backends
John Smith
committed
3b99bc5
fix(i18n): drop TODO markers from user activity strings
John Smith
committed
ac9851f
docs: correct upstream PR refs and roadmap claims
John Smith
committed
08d7f35
Merge pull request #62 from Heretek-Games/fix/desktop-typecheck
BillyOutlast
authored
18ac88e
Merge branch 'develop' into fix/core-hardening
BillyOutlast
authored
e4b5106
Merge pull request #63 from Heretek-Games/fix/core-hardening
BillyOutlast
authored
1db45df
fix(server): reclaim pruned save objects and cap uploads while streaming
John Smith
committed
adede2e
fix(desktop): consume plugin events through the Tauri event bridge
John Smith
committed
d0e2953
docs(roadmap): correct test count and record anti-cheat SPI follow-up
John Smith
committed
6bcfa1b
refactor(desktop): expose a generic findFiles host primitive
John Smith
committed
8dde0ae
docs(roadmap): record the completed findFiles anti-cheat refactor
John Smith
committed
a8c8ba5
feat(torrential): add opt-in chunk authentication for remote depots
John Smith
committed
e565d0e
feat(torrential): verify LAN peer chunk SHA-256 before commit
John Smith
committed
d0aa35f
feat(server): add leaderboard API and best-score tracking
John Smith
committed
c13bfeb
feat(cli): binary delta and branch/depot metadata for downpour push
John Smith
committed
e9a126e
feat(server): add Drop Workshop mod registry and subscriptions
John Smith
committed
24a2169
feat(desktop): stage shader caches before launch and document the pack format
John Smith
committed
c6b9206
feat(server): validate admin depot endpoints before registration
John Smith
committed
664b7d1
docs(roadmap): record workshop, leaderboards, federation and mirror progress
John Smith
committed
a58e6bf
feat(server): implement the Dropworks native SDK REST contract
John Smith
committed
4551527
feat(server): add per-game discussion forums
John Smith
committed
9fca213
feat(desktop): show per-game forum threads on the community page
John Smith
committed
3db5871
feat(torrential): add mDNS LAN discovery backend
John Smith
committed
5f7ba9e
feat(server): purchase orders and Ed25519 ownership receipts
John Smith
committed
b241a69
docs(roadmap): record commerce, forums and dropworks progress
John Smith
committed
902d6ba
feat(input): add a Linux uinput virtual-gamepad backend
John Smith
committed
327996f
feat(server): add storefront price tiers
John Smith
committed
633a140
feat(community): add a public screenshot gallery
John Smith
committed
de1b808
feat(server): global leaderboards on the Dropworks API
John Smith
committed
e68dfac
docs(roadmap): record dropworks leaderboards, sharing and moderation progress
John Smith
committed
28cfbbe
feat(server): add developer crash telemetry
John Smith
committed
1513ce8
feat(server): add local rich presence
John Smith
committed
3529482
feat(desktop): report local presence on launch and exit
John Smith
committed
d7d8439
feat(server): add dropworks presence endpoint
John Smith
committed
e76589e
docs(roadmap): add dropworks presence and refresh status evidence
John Smith
committed
fd43799
docs(roadmap): note the dropworks csharp binding
John Smith
committed
6d063d9
docs(roadmap): record the gdscript binding
John Smith
committed
e31a258
feat(server): add WebRTC ICE configuration provider
John Smith
committed
afacbd0
docs(roadmap): record the webrtc signaling relay
John Smith
committed
a580892
feat(desktop): add the client WebRTC peer module
John Smith
committed
4c9e59d
feat(desktop): add the workshop mod load planner
John Smith
committed
dd54cad
feat(workshop): include the mod in subscription listings
John Smith
committed
8363593
feat(desktop): add a workshop mod manager page
John Smith
committed
8950364
feat(input): add shareable controller profiles
John Smith
committed
501b040
feat(power): add handheld battery policy and command
John Smith
committed
65313e6
docs(roadmap): add remaining-work map and refresh verification
John Smith
committed
02296fd
fix(server): harden plugin route patterns, i18n keys, and container user
John Smith
committed
37bb20e