Fork improvements - #2

Closed

Michm0TheH00d wants to merge 10 commits into

Wasabules:mainfrom

Michm0TheH00d:fork-improvements

Commits on Jul 8, 2026

fix(export): prevent CSV formula injection in log export (CWE-1236)
Security Hardening
committed
fix(updater): compare version components numerically
Security Hardening
committed
fix(encryption): close disable-encryption bypass, use constant-time compares
Security Hardening
committed
feat(server): configurable bind address for all listeners
Security Hardening
committed
feat(server): cap concurrent TCP/TLS connections
Security Hardening
committed
feat(server): optional source IP allowlist
Security Hardening
committed
fix(server): close active connections on Stop to avoid shutdown hang
Security Hardening
committed
feat(encryption): persist unlock lockout with backoff across restarts
Security Hardening
committed
feat(pki): persist generated CA across restarts
Security Hardening
committed
feat(server): support RFC 6587 octet-counted TCP/TLS framing
Security Hardening
committed