security: fix audit findings — C1, H1–H4, M1–M5#998

Open

lhotea wants to merge 6 commits into

ankitpokhrel:mainfrom

lhotea:security/fix-high-medium-audit-findings

Commits on May 22, 2026

fix(security): write config atomically with 0600, no .bkp residue (H1, H2)
Arnaud L'Hôte
committed
fix(security): sanitise terminal control sequences from server data (M1)
Arnaud L'Hôte
committed
fix(security): scrub Authorization header in debug dump (C1)
Arnaud L'Hôte
committed

Commits on May 26, 2026

chore(security): bump golang.org/x/net (H4)
Arnaud L'Hôte
committed
fix(security): mTLS hardening — key perm check, drop renegotiation, redact paths (H3, M4)
Arnaud L'Hôte
committed
fix(security): insecure UX, token precedence, goldmark bump (M2, M3, M5)
Arnaud L'Hôte
committed