Commit Graph
8 Commits
Author SHA1 Message Date
ayrisdevandClaude Opus 4.8 782226674a Security: harden SSRF guard on stream proxies, fix vtt-proxy allowlist
Resolve hosts to IPs and reject private/reserved/link-local ranges (incl.
169.254 cloud metadata) instead of matching hostname text, and re-validate
every redirect hop by following them manually. Restrict curl to http(s).
vtt-proxy allowlist now requires an exact host or a real subdomain.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-15 13:12:44 +03:00
ayrisdevandClaude Opus 4.8 cf8c5be984 Add discreet partner link to footer
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-15 10:23:07 +03:00
ayrisdevandClaude Opus 4.8 4d24b04cef Add "Created by ayris.tech" credit to footer
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-14 11:37:49 +03:00
ayrisdevandClaude Opus 4.8 145ff396ee Add Ayris VPS Panel analytics script to frontend head
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-14 11:31:51 +03:00
ayrisdevandClaude Opus 4.8 32777dabac Security: remove backdoor scripts from public/ (setup, migrate_run, clearcache, error_log)
Unauthenticated cache-clear (DoS) and weak-key migration runners; not needed by the app.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-14 01:31:14 +03:00
ayrisdevandClaude Opus 4.8 6437ac112c Fix container crash: skip route:cache (app has Closure routes), make entrypoint tolerant
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-14 00:15:13 +03:00
ayrisdevandClaude Opus 4.8 3f602c61ef Add production Dockerfile (php-fpm + nginx) for Coolify
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-14 00:03:55 +03:00
ayrisdevandClaude Opus 4.8 a63515cfc6 Initial commit: Animexe Laravel platform
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-14 00:01:48 +03:00