llm-team-ui

Go to file

root ea0ba33212 security: set SESSION_COOKIE_SECURE + validate IP before nginx deny write

Two hardening fixes from a fresh security pass of the live code:

- SESSION_COOKIE_SECURE=True: the session cookie set only HTTPONLY +
  SAMESITE=Lax, so it could be sent over plaintext HTTP. App is served
  behind nginx TLS, so no functional downside.
- _nginx_ban: validate the IP with ipaddress.ip_address() before
  interpolating it into the nginx deny file. A malformed value could
  otherwise inject nginx directives at the last write before reload.
  Guard sits at the sink, covering all current and future callers.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-20 18:00:50 -05:00

server

Add triage, backup, and disaster recovery system

2026-03-25 04:52:48 -05:00

.gitignore

llm_team_ui: 4 fixes from 2026-04-30 cross-lineage scrum

2026-04-30 03:14:08 -05:00

llm_team_config.json

LLM Team UI v1.0 — full-stack local AI orchestration platform

2026-03-25 02:51:36 -05:00

llm_team_ui.py

security: set SESSION_COOKIE_SECURE + validate IP before nginx deny write