History

Harden OAuth sessions and patch vulnerable dependencies (#2000)

* Update YAML, URI, and serialization dependencies * Harden sessions, credential traces, and runtime dependencies * Require HTTPS for cloud outbound requests * Normalize dependency resolution for frozen installs * Prebundle browser telemetry before cloud development starts

Rhys Sullivan committed 2 months ago

Commit 3fd28a51 parent 521c77b26 files · +1299 −699Browse files

Showing the changes to apps/cloud/src/engine/execution-stack.ts (1 of 26 files). Show all

Unified · Split

apps/cloud/src/engine/execution-stack.ts+1−0
@@ -96,6 +96,7 @@ export const CloudHostConfig: Layer.Layer<HostConfig> = Layer.sync(HostConfig, ( · 95 unmodified lines
9696 // the e2e dev-server env opts in with `"true"` so in-scenario fixture
9797 // servers on localhost are reachable. See `hosted-http-client.ts`.
9898 allowLocalNetwork: env.ALLOW_LOCAL_NETWORK === "true",
99+ requireTls: true,
99100 webBaseUrl: env.VITE_PUBLIC_SITE_URL ?? "https://executor.sh",
100101 oauthCallbackPath: `${CLOUD_MOUNT_PREFIX}/oauth/callback`,
101102 // WorkOS Vault is cloud's credential storage implementation detail, not a