v0.35.2
RightNow-AI/openfangv0.35.2Aug 31, 2026by github-actions[bot]
Upgrading?
AI Summary
Hardens dashboard origin validation and reverse-proxy access to prevent DNS rebinding and cross-origin attacks.
Key Highlights
- Hardened dashboard origin validation and reverse-proxy access
- Defense against DNS rebinding, form/header smuggling, and cross-origin requests
- Reverse-proxied origins require exact HTTPS allowlisting and token authentication
Full Release Notes
### Security - Hardened **dashboard origin validation and reverse-proxy access** with same-origin provenance enforcement that defends against DNS rebinding, form/header smuggling, and cross-origin requests. Reverse-proxied origins now require exact HTTPS allowlisting and generated token authentication, while tokenless IPv4 and IPv6 loopback access remains supported. Dashboard options are validated strictly, and CLI and MCP lifecycle behavior is aligned (#1738) ### Bug Fixes - Fixed **root remote CDP WebSocket URLs with query strings** to insert the required slash before the query while preserving the encoded query (#1735) ### Contributors - @ctate - @Railly
Related Repositories
A cross-platform desktop All-in-One assistant for Claude Code, Codex, OpenCode, OpenClaw, Grok Build & Hermes Agent. Only official website: ccswitch.io
An open-source remote desktop application designed for self-hosting, as an alternative to TeamViewer.
Build smaller, faster, and more secure desktop and mobile applications with a web frontend.
π RuView turns commodity WiFi signals into real-time spatial intelligence, vital sign monitoring, and presence detection — all without a single pixel of video.
Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one