hermes-agent/website/docs
0xbyt4 0ff1b4ade2 fix: harden web gateway security and fix error swallowing
- Use hmac.compare_digest for timing-safe token comparison (3 endpoints)
- Default bind to 127.0.0.1 instead of 0.0.0.0
- Sanitize upload filenames with Path.name to prevent path traversal
- Add DOMPurify to sanitize marked.parse() output against XSS
- Replace add_static with authenticated media handler
- Hide token in group chats for /remote-control command
- Use ctypes.util.find_library for Opus instead of hardcoded paths
- Add force=True to 5 interrupt _vprint calls for visibility
- Log Opus decode errors and voice restart failures instead of swallowing
2026-03-14 14:27:21 +03:00
..
developer-guide docs: add ACP and internal systems implementation guides 2026-03-14 00:29:48 -07:00
getting-started docs: add ACP and internal systems implementation guides 2026-03-14 00:29:48 -07:00
guides docs: add Guides & Tutorials section, restructure sidebar 2026-03-08 19:37:34 -07:00
reference docs: add ACP and internal systems implementation guides 2026-03-14 00:29:48 -07:00
user-guide fix: harden web gateway security and fix error swallowing 2026-03-14 14:27:21 +03:00
index.md docs: add Guides & Tutorials section, restructure sidebar 2026-03-08 19:37:34 -07:00