fix: adversarial audit follow-ups (security, proxy, lifecycle) - #122

Open

daquinoaldo wants to merge 27 commits into

Commits on Sep 16, 2026

fix: repair the release workflow
daquinoaldo
committed
3c3c23d
fix: preserve upgrade headers when proxying WebSocket upgrades
daquinoaldo
committed
8dcb658
fix: stop hanging the client when an upstream refuses a WebSocket upgrade
daquinoaldo
committed
920144d
fix: confine static file serving to the served root across symlinks
daquinoaldo
committed
ad6cf6c
fix: make the mkcert download robust against errors and a corrupt cache
daquinoaldo
committed
d4a8389
fix: drop headers listed in Connection when proxying
daquinoaldo
committed
1aa5526
fix: reject listen errors and close the previous server on re-listen
daquinoaldo
committed
38dc257
fix: use root-relative locations for directory redirects
daquinoaldo
committed
7780516
fix: download the mkcert binary matching the CPU architecture
daquinoaldo
committed
d0b0f91
fix: throw instead of exiting the process on an unsupported platform
daquinoaldo
committed
028dd53
fix: friendlier CLI errors for invalid input and startup failures
daquinoaldo
committed
9b857d0
fix: strip only the port from the Host in http->https redirects
daquinoaldo
committed
b37f7d8
fix: keep tsbuildinfo out of the npm tarball and export package.json
daquinoaldo
committed
1d4a615
fix: make the build script Windows-compatible
daquinoaldo
committed
d7cacf6
fix: serve multi-range requests as full representations
daquinoaldo
committed
60d2be1
docs: add --help flag, install-mode note, and CORS warning
daquinoaldo
committed
40b2493
fix: list src/cli.ts directly in the knip entries
daquinoaldo
committed
0a42187
fix: drop the redundant knip entry for src/cli.ts
daquinoaldo
committed
d4c4efa
fix: tear down the proxied tunnel when one peer disconnects
daquinoaldo
committed
d511d1a
test: cover the fixed proxy, static, and redirect behaviors
daquinoaldo
committed
0c900ea
fix: address CodeQL and GH security findings
daquinoaldo
committed
e2355b5
test: make the nested fixture an actual HTML document
daquinoaldo
committed
aa06e1b
docs: always install the module as a dev dependency and drop the CORS warning
daquinoaldo
committed
d337602
build: compile ESM and CJS with plain pnpm scripts like the monorepo
daquinoaldo
committed
5a0f31e
fix: retry synchronous ETXTBSY errors from mkcert startup
daquinoaldo
committed
2c4abc3
fix: download mkcert to a temp file and rename it into place
daquinoaldo
committed
117a973
fix: avoid ETXTBSY by creating the download file after HTTP validation
daquinoaldo
committed
5ded146