Skip to content

Security: harden public gateway boundaries - #42

Draft
codepilotios wants to merge 14 commits into
mainfrom
agent/security-scan-2026-07-19
Draft

codepilotios wants to merge 14 commits into
mainfrom
agent/security-scan-2026-07-19

Conversation

@codepilotios

@codepilotios codepilotios commented Jul 19, 2026 •

Copy link
Copy Markdown
Owner

Summary

  • minimize unauthenticated gateway diagnostics and fingerprinting
  • keep privileged remote-control routes fail-closed
  • require origin-only HTTPS gateway URLs except for loopback development
  • isolate proxied localhost pages in nonpersistent iOS web storage
  • canonicalize download and local-web response metadata
  • strictly validate notification tokens, topics, environments, and Live Activity identifiers without backtracking regexes
  • bound and strictly parse bearer authorization headers
  • add CodeQL and Dependabot coverage plus security regressions

Verification

  • 156 gateway unit tests
  • Swift package tests and debug build
  • Cloudflare, token-argv, LaunchAgent, desktop-sync, public-write, privacy, and public-presence audits
  • iOS simulator tests and CodeQL run in CI

Release note

Draft only. Maintainer-authorized OTA distribution and the documented private launch-security reviews remain required before deployment.

Comment thread gateway/codex_phone_gateway.py Fixed
Comment thread gateway/codex_phone_gateway.py Fixed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants