MCP server, security hardening, Astro 7 upgrade, and test coverage - #1

Merged

erubboli merged 10 commits into

mainfrom

feat/mcp-server-security-hardening

Aug 7, 2026

Commits on Jun 9, 2026

security: extract RPC allowlist, fix method names, remove dangerous methods, sanitize errors
erubboli
committed
d2bb90b
fix: consistent error shape in rpc proxy; add mock cleanup; fix allowlist comment
erubboli
committed
ec33c9d
security: enforce RPC allowlist in plugin context; add tar path-traversal guard
erubboli
committed
0b8ca2f
fix: handle dangling symlinks in plugin path-traversal guard; remove wallet_open/create from plugin allowlist
erubboli
committed
0b86951
security: re-enable CSRF origin check
erubboli
committed
b57edcb
security: add Secure flag to session and passkey challenge cookies
erubboli
committed
faa0583
security: add X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy headers
erubboli
committed
d220c2d
security: escape HTML in token badge innerHTML to prevent stored XSS
erubboli
committed
ef1a3a6

Commits on Aug 7, 2026