hermes-agent/website/docs/user-guide/messaging
0xbyt4 0ff1b4ade2 fix: harden web gateway security and fix error swallowing
- Use hmac.compare_digest for timing-safe token comparison (3 endpoints)
- Default bind to 127.0.0.1 instead of 0.0.0.0
- Sanitize upload filenames with Path.name to prevent path traversal
- Add DOMPurify to sanitize marked.parse() output against XSS
- Replace add_static with authenticated media handler
- Hide token in group chats for /remote-control command
- Use ctypes.util.find_library for Opus instead of hardcoded paths
- Add force=True to 5 interrupt _vprint calls for visibility
- Log Opus decode errors and voice restart failures instead of swallowing
2026-03-14 14:27:21 +03:00
..
_category_.json feat: add documentation website (Docusaurus) 2026-03-05 05:24:55 -08:00
discord.md docs: add comprehensive voice mode documentation 2026-03-14 14:27:20 +03:00
email.md fix: wire email platform into toolset mappings + add documentation 2026-03-11 06:34:32 -07:00
homeassistant.md docs: expand Docusaurus coverage across CLI, tools, skills, and skins (#1232) 2026-03-13 21:34:41 -07:00
index.md docs: add Web UI setup guide and update gateway docs 2026-03-14 14:27:20 +03:00
signal.md docs: expand Docusaurus coverage across CLI, tools, skills, and skins (#1232) 2026-03-13 21:34:41 -07:00
slack.md docs: expand Docusaurus coverage across CLI, tools, skills, and skins (#1232) 2026-03-13 21:34:41 -07:00
telegram.md docs: comprehensive rewrite of all messaging platform setup guides 2026-03-08 19:51:42 -07:00
web.md fix: harden web gateway security and fix error swallowing 2026-03-14 14:27:21 +03:00
whatsapp.md docs: expand Docusaurus coverage across CLI, tools, skills, and skins (#1232) 2026-03-13 21:34:41 -07:00