rengine

WEBDIENSTE/rengine

Fork 0

mirror of https://github.com/yogeshojha/rengine.git synced 2026-10-20 15:21:30 +02:00

Files

T

History

Yogesh OjhaandClaude Opus 5 c88c4b5e00 fix(engines): refuse to store a masked credential

export_yaml masks global_headers and tool_options, and import_yaml feeds
that document straight into create(), which had nothing to unmask it
against. Exporting an engine that carried auth and importing it back
produced an engine that sent `Authorization: ••••••••` to every target
and handed nuclei `-api-key ••••••••`.

Both validators now refuse a value carrying the mask, naming the header
or the tool. update() keeps working: it restores the stored value first
and validates what it is about to store, rather than what was submitted,
so the editor can keep sending masked values back.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01X5roHYDYzSPRNaTkn8hSkJ

2026-09-13 11:17:17 +05:30

app

fix(engines): refuse to store a masked credential

2026-09-13 11:17:17 +05:30

.gitignore

change project structure

2026-02-04 20:05:28 +05:30

Dockerfile

feat(connectors): browsing lands in the endpoints inventory

2026-09-12 16:39:23 +05:30

entrypoint.sh

perf: make the read path scale with the estate