v0.35.2
tashfeenahmed/freellmapiv0.35.2Aug 31, 2026by github-actions[bot]
Upgrading?
AI Summary
A security update that hardens dashboard origin validation and reverse-proxy access, along with a fix for root remote CDP WebSocket URLs.
Key Highlights
- Hardened dashboard origin validation
- Defense against DNS rebinding and form/header smuggling
- Strict HTTPS allowlisting for reverse-proxied origins
- Fixed root remote CDP WebSocket URLs with query strings
Full Release Notes
### Security - Hardened **dashboard origin validation and reverse-proxy access** with same-origin provenance enforcement that defends against DNS rebinding, form/header smuggling, and cross-origin requests. Reverse-proxied origins now require exact HTTPS allowlisting and generated token authentication, while tokenless IPv4 and IPv6 loopback access remains supported. Dashboard options are validated strictly, and CLI and MCP lifecycle behavior is aligned (#1738) ### Bug Fixes - Fixed **root remote CDP WebSocket URLs with query strings** to insert the required slash before the query while preserving the encoded query (#1735) ### Contributors - @ctate - @Railly
Related Repositories
openclaw/openclaw★ 392,729
The AI that really does things. Any OS. Any Platform. The lobster way. 🦞
nilbuild/developer-roadmap★ 370,105
Interactive roadmaps, guides and other educational content to help developers grow in their careers.
morluto/rea★ 361,460
Reverse engineer anything with agents, from app behavior down to native binaries.
anomalyco/opencode★ 219,920
The open source coding agent.
n8n-io/n8n★ 208,293
Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.