Garry Tan c151fabfca fix(security): IPv6 ULA blocking, cookie redaction, per-tab cancel, targeted token (#664) ... Community PR #664 by @mr-k-man (security audit round 1, new parts only). - IPv6 ULA prefix blocking (fc00::/7) in url-validation.ts with false-positive guard for hostnames like fd.example.com - Cookie value redaction for tokens, API keys, JWTs in browse cookies command - Per-tab cancel files in killAgent() replacing broken global kill-signal - design/serve.ts: realpathSync upgrade prevents symlink bypass in /api/reload - extension: targeted getToken handler replaces token-in-health-broadcast - Supabase migration 003: column-level GRANT restricts anon UPDATE scope - Telemetry sync: upsert error logging - 10 new tests for IPv6, cookie redaction, DNS rebinding, path traversal Co-Authored-By: mr-k-man <mr-k-man@users.noreply.github.com> Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>		2026-04-05 22:58:06 -07:00
..
001_telemetry.sql	feat: opt-in usage telemetry + community intelligence platform (v0.8.6) (#210)	2026-03-19 17:21:05 -07:00
002_tighten_rls.sql	fix: Supabase telemetry security lockdown (v0.11.16.0) (#460)	2026-03-24 15:01:31 -07:00
003_installations_upsert_policy.sql	fix(security): IPv6 ULA blocking, cookie redaction, per-tab cancel, targeted token (#664)	2026-04-05 22:58:06 -07:00