stroblmeandClaude Opus 5.5 cf5329e3a8 Harden the remote worker: TLS off loopback, full digests, filtered env ...

fluksio-worker now refuses ws:// and http:// engine and artifact URLs unless
they are loopback or --insecure is given; the engine still accepts both.
An artifact reference must be sha256: plus 64 hex digits before it is joined
into a path, and node code gets the host environment through the engine's
credential denylist instead of all of it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013GAeg4Jo6xjZzjwy9QDWMQ

2026-10-06 12:18:30 +02:00

..

agents.md

Document the wren node and the chat's Control tab

2026-10-05 20:59:23 +02:00

api.md

Make changing engine-run code superuser-only

2026-10-06 11:36:30 +02:00

cli.md

Make changing engine-run code superuser-only

2026-10-06 11:36:30 +02:00

connectors.md

Make the docs state things rather than argue them

2026-08-31 10:49:58 +02:00

nodes.md

Push a frame instead of storing and fetching it

2026-09-02 10:15:14 +02:00

workers.md

Harden the remote worker: TLS off loopback, full digests, filtered env

2026-10-06 12:18:30 +02:00