3 Commits

Include renames

Author	SHA1	Message	Date
qing	90761a723d	docs(confs): fill in commit hashes for fixed issues in audit report	2026-08-01 03:43:01 +08:00
qing	b53d4999ce	fix(confs): harden parameter validation and prevent cache/info leaks ... P1 fixes: - P1-1 _handle_reload: empty string/0/false/falsy name no longer clears all caches; only explicit null/omitted name triggers full cache clear; non-string name raises ConfigError instead of being silently str()-converted - P1-2 ConfigStore.get(): return dict(entry) shallow copy instead of direct cache reference to prevent callers from mutating the internal cache - P1-3 list(): resolve symlinks via os.path.realpath() and skip entries whose real path escapes configs/ root; prevents leaking external file metadata (size, mtime) through directory-traversing symlinks - P1-4 _handle_get key: validate key is a string (isinstance check); reject non-string/empty key with clear ConfigError instead of misleading str() conversion leading to "key not found" errors P2 fixes: - P2-1 ConfigParser: use interpolation=None to disable %(key)s interpolation, preventing InterpolationError on config values containing bare % characters - P2-2 argparse: update description from "pymsg/TCP" to "pymsg RpcServer/TCP" to match module docstring Also update SECURITY_AUDIT_20260801.md to mark issues 9-14 as fixed and refresh the security mechanisms summary table; all P0/P1 issues are now resolved.	2026-08-01 03:42:46 +08:00
qing	e4e9968d14	docs(confs): add security audit report 20260801 ... - Audit covers confs.py, log_client.py, startup scripts, and pymsg/rpc.py dependency - Documents 8 issues fixed during this audit cycle (P0-P2) including Slowloris DoS, OOM, thread death, TOCTOU race, and log_client hardening - Lists 4 remaining P1 issues (reload empty string clears all cache, mutable cache reference leak, list() symlink metadata leak, key type validation), 4 P2 issues, and 6 P3 issues with root cause, risk analysis, and fix suggestions - Security mechanisms summary table for quick reference - Follows project convention: gateway/docs/SECURITY_AUDIT_YYYYMMDD.md	2026-08-01 03:37:22 +08:00