Frederico Luz 37ef25c671 Security: validate URLs to prevent SSRF and local resource access ... Add url-validation.ts that blocks file:// URLs, private/internal IPs (127.0.0.0/8, 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 169.254.0.0/16, ::1, fc00::/7), and non-HTTP schemes before any page.goto() call. Applied in all three navigation points: goto command, newTab(), and diff. Bypass with BROWSE_ALLOW_PRIVATE=1 for local development. Fixes #17 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>		2026-03-12 22:14:53 +00:00
..
src	Security: validate URLs to prevent SSRF and local resource access	2026-03-12 22:14:53 +00:00
test	fix: harden browse install and lifecycle checks (#4)	2026-03-12 07:35:20 -07:00
SKILL.md	Initial release — gstack v0.0.1	2026-03-12 01:32:16 -07:00