Commit graph

3 commits

Author SHA1 Message Date
google-labs-jules[bot]
82f12cb8e7 Fix: Prevent information exposure in web dashboard error handling
- Modified scripts/web_dashboard.py to return generic 500 error instead of exception details
- Added regression test in scripts/test_web_dashboard.py
- Updated .jules/sentinel.md with security learnings
2026-02-24 12:08:11 +00:00
google-labs-jules[bot]
e9918dcb22 docs: update Cloudflare nameservers and unify domain name
- Added daisy.ns.cloudflare.com and rocco.ns.cloudflare.com to Cloudflare guide.
- Unified domain name to lengkundee01.org in CNAME and PWA guide.
- Verified active domain using dig.
- Updated sentinel journal with documentation learnings.
2026-02-13 04:11:32 +00:00
google-labs-jules[bot]
9b6778cba0 Fix CRITICAL authorization bypass in Telegram Bot
- Changed `check_authorized` in `scripts/telegram_deploy_bot.py` to fail closed (deny all) if `TELEGRAM_ALLOWED_USER_IDS` is unset or empty.
- Updated `scripts/TELEGRAM_BOT_SETUP.md` and `QUICK_DEPLOY.md` to document that `TELEGRAM_ALLOWED_USER_IDS` is now mandatory for bot access.
- Added Sentinel Journal entry in `.jules/sentinel.md` documenting the vulnerability and learning.
- Verified fix with reproduction script.
2026-02-07 11:33:43 +00:00