Title: sec(cli): scheme-allowlist openBrowser + atomic tokens.Save (F-17, F-18) by mastermanas805 · Pull Request #20 · InstaNode-dev/cli · GitHub
Open Graph Title: sec(cli): scheme-allowlist openBrowser + atomic tokens.Save (F-17, F-18) by mastermanas805 · Pull Request #20 · InstaNode-dev/cli
X Title: sec(cli): scheme-allowlist openBrowser + atomic tokens.Save (F-17, F-18) by mastermanas805 · Pull Request #20 · InstaNode-dev/cli
Description: instant CLI — provision a free Postgres/Redis/MongoDB/queue/storage and deploy your app from the terminal in one command, no account or Docker. The zero-friction infra CLI for developers and AI agents. - sec(cli): scheme-allowlist openBrowser + atomic tokens.Save (F-17, F-18) by mastermanas805 · Pull Request #20 · InstaNode-dev/cli
Open Graph Description: Closes SEC-CLI F-17 (CWE-78/88) and F-18 (CWE-367 TOCTOU) — both static-only findings, defense-in-depth. F-17 — openBrowser scheme allowlist (cmd/login.go) A hostile API server returning {"aut...
X Description: Closes SEC-CLI F-17 (CWE-78/88) and F-18 (CWE-367 TOCTOU) — both static-only findings, defense-in-depth. F-17 — openBrowser scheme allowlist (cmd/login.go) A hostile API server returning {"...
Opengraph URL: https://github.com/InstaNode-dev/cli/pull/20
X: @github
Domain: github.com
| route-pattern | /_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format) |
| route-controller | voltron_pull_requests_fragments |
| route-action | pull_request_layout |
| fetch-nonce | v2:7b339b98-85d2-99ba-7a29-b7e07b43ce03 |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | DF4A:1757D5:15B019:1DBC93:6A62650A |
| html-safe-nonce | 07a5fe93234f852862dc3f69b3f2710e43b688647d2546f9fee587db85221184 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJERjRBOjE3NTdENToxNUIwMTk6MURCQzkzOjZBNjI2NTBBIiwidmlzaXRvcl9pZCI6IjM3Njg2ODkwMDM0OTc0MTU5NDciLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | e466a2d77c252f37c95f0b794253d3d7ef615fbb1cf6edacff981d1c5a8e3ed8 |
| hovercard-subject-tag | pull_request:3770694962 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/InstaNode-dev/cli/20/pull_request_layout |
| twitter:image | https://opengraph.githubassets.com/2abcdc76329db75ae729553d37a704045889c37c1d4ee8a249e436e49cf30857/InstaNode-dev/cli/pull/20 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/2abcdc76329db75ae729553d37a704045889c37c1d4ee8a249e436e49cf30857/InstaNode-dev/cli/pull/20 |
| og:image:alt | Closes SEC-CLI F-17 (CWE-78/88) and F-18 (CWE-367 TOCTOU) — both static-only findings, defense-in-depth. F-17 — openBrowser scheme allowlist (cmd/login.go) A hostile API server returning {"aut... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | mastermanas805 |
| hostname | github.com |
| expected-hostname | github.com |
| None | 194bddaed53c0eb07047629c520853f4208e77a17ff57428346485cc202e39f2 |
| turbo-cache-control | no-cache |
| go-import | github.com/InstaNode-dev/cli git https://github.com/InstaNode-dev/cli.git |
| octolytics-dimension-user_id | 274719060 |
| octolytics-dimension-user_login | InstaNode-dev |
| octolytics-dimension-repository_id | 1212552592 |
| octolytics-dimension-repository_nwo | InstaNode-dev/cli |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 1212552592 |
| octolytics-dimension-repository_network_root_nwo | InstaNode-dev/cli |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | c2862cf2db52f0c7f6cba3de21ffeeafe7c5456e |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width