Skip to content

[Follow-up] Add experimental WebUI for short messages with session-based login#942

Closed
boomzero wants to merge 27 commits into
devfrom
codex/github-mention-feature-request]-webui-for-short-message-vi
Closed

[Follow-up] Add experimental WebUI for short messages with session-based login#942
boomzero wants to merge 27 commits into
devfrom
codex/github-mention-feature-request]-webui-for-short-message-vi

fix: add proxy mode for webui login and api calls

b7c77e6
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL failed Mar 15, 2026 in 4s

3 new alerts including 1 critical severity security vulnerability

New alerts in code changed by this pull request

Security Alerts:

  • 1 critical
  • 2 high

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 37 in tools/webui-proxy.mjs

See this annotation in the file changed.

Code scanning / CodeQL

Use of password hash with insufficient computational effort High

Password from
an access to password
Loading
is hashed insecurely.
Password from
an access to password
Loading
is hashed insecurely.

Check failure on line 97 in tools/webui-proxy.mjs

See this annotation in the file changed.

Code scanning / CodeQL

Server-side request forgery Critical

The
URL
Loading
of this request depends on a
user-provided value
Loading
.

Check failure on line 8 in webui.html

See this annotation in the file changed.

Code scanning / CodeQL

Untrusted domain used in script or other content High

Content loaded from untrusted domain with no integrity check.