This release adds 1 notable feature for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+14 more
Summary
AI summaryFixed web client file filter missing .md and improved result rendering with visible status prompts.
Full changelog
修复用户反馈的 web 端无法真实扫描的问题。
修复
- 客户端文件过滤漏了
.md:导致 markdown 为主的项目(prompt/skill 库)上传后被全部过滤、提示"未找到可扫描文件"——现与服务端对齐 - 结果渲染改用 Blob URL 跳转(替代不可靠的
document.write,此前报告偶尔写不出) - 加可见状态提示:读取 / 扫描 / 失败都显示在页面,不再静默失败
测试
- 新增
test-web.ts:18 项端到端集成测试(启真实 http 服务,测上传扫描 / 本地路径 / URL 校验 / 路径穿越防护 / 双模式权限),纳入npm test - 全套 300 测试全绿
更新后请 硬刷新浏览器(Cmd+Shift+R)再试。
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About jnMetaCode/shellward
AI Agent Security Middleware & MCP Server with 8-layer defense including prompt injection detection, DLP data flow tracking, command blocking, and PII detection. 7 MCP tools, zero dependencies.
Related context
Related tools
Beta — feedback welcome: [email protected]