Integrate security-hardening (#1) + fork-improvements (#2) from @Michm0TheH00d - #4

Merged

Wasabules merged 12 commits into

mainfrom

Jul 12, 2026

Commits on Jul 8, 2026

fix(export): prevent CSV formula injection in log export (CWE-1236)
Security Hardening
committed
fix(updater): compare version components numerically
Security Hardening
committed
fix(encryption): close disable-encryption bypass, use constant-time compares
Security Hardening
committed
feat(server): configurable bind address for all listeners
Security Hardening
committed
feat(server): cap concurrent TCP/TLS connections
Security Hardening
committed
feat(server): optional source IP allowlist
Security Hardening
committed
fix(server): close active connections on Stop to avoid shutdown hang
Security Hardening
committed
feat(encryption): persist unlock lockout with backoff across restarts
Security Hardening
committed
feat(pki): persist generated CA across restarts
Security Hardening
committed
feat(server): support RFC 6587 octet-counted TCP/TLS framing
Security Hardening
committed

Commits on Jul 12, 2026