validation failure merely to justify changing the input.
- This permissive policy does not override security boundaries such as path
containment, or integrity checks required to load model formats and
checkpoints
3 projects use a version of this
146k9mo agoReviewMountCreate a free account to mount
boilerplate
- Double-check highlights by counting lines from 1 within each code block
### Server Security: Internal Header Filtering
Next.js strips internal headers from incoming requests via `filterInternalHeaders()` in `packages/next/src/server/lib/server-ipc/utils.ts`. This
Steady2 mentions in 2 weeks
No other project uses it yet
143k6mo agoReviewMountCreate a free account to mount
deliberately kept as simple as possible: complexity is a direct multiplier on security risk and long-term maintenance cost, so a simpler change that does
Steady14 mentions in 2 weeks
No other project uses it yet
134k2mo agoReviewMountCreate a free account to mount
input simulation in `libs/enigo/`
- **Audio/Video Services**: Real-time audio/video streaming in `src/server/`
- **File Transfer**: Secure file transfer implementation in `libs/base/src/fs.rs`
`hbb_common` is a git submodule shared with the server
Steady6 mentions in 2 weeks
No other project uses it yet
129k24mo agoReviewMountCreate a free account to mount
line scripts in `bash` commands.
- Never commit unless the user asks.
## Dependency and Install Security
- Treat npm dep and lockfile changes as reviewed code. Direct registry deps, including internal workspace
1 project uses a version of this
121k4mo agoReviewMountCreate a free account to mount
/example.com'` - Matches both `http://` and `https://` protocols
* `'chrome-extension://*'` - Matches any Chrome extension URL
* **Security**: Wildcards in TLD (e.g., `example.*`) are **not allowed** for security
* Use list like `['*.google.com
Steady6 mentions in 2 weeks
No other project uses it yet
120k6mo agoReviewMountCreate a free account to mount
parallel fan-out with a merge step** — used by `/ship` to run `code-reviewer`, `security-auditor`, and `test-engineer` concurrently and synthesize their reports. Do not build a "router" persona
1 project uses a version of this
114k15d agoReviewMountCreate a free account to mount
fresh install, run `npm rebuild husky && npx husky` once.
- Adding or updating dependencies is security-sensitive; `package-lock.json` is checked by `lockfile-lint` for npm HTTPS hosts and integrity hashes.
- Package
No other project uses it yet
109k11d agoReviewMountCreate a free account to mount
complements
`CLAUDE.md`; scoped `AGENTS.md` files may add local rules but must not weaken the
security, evidence, or release requirements here.
RuView is a camera-free RF perception system. Production Rust
1 project uses a version of this
103k9mo agoReviewMountCreate a free account to mount