6 Commits

Author	SHA1	Message	Date
David Osipov	97d4a1c5c8	Refactor and enhance security in proxy and handshake modules ... - Updated `direct_relay_security_tests.rs` to ensure sanitized paths are correctly validated against resolved paths. - Added tests for symlink handling in `unknown_dc_log_path_revalidation` to prevent symlink target escape vulnerabilities. - Modified `handshake.rs` to use a more robust hashing strategy for eviction offsets, improving the eviction logic in `auth_probe_record_failure_with_state`. - Introduced new tests in `handshake_security_tests.rs` to validate eviction logic under various conditions, ensuring low fail streak entries are prioritized for eviction. - Simplified `route_mode.rs` by removing unnecessary atomic mode tracking, streamlining the transition logic in `RouteRuntimeController`. - Enhanced `route_mode_security_tests.rs` with comprehensive tests for mode transitions and their effects on session states, ensuring consistency under concurrent modifications. - Cleaned up `emulator.rs` by removing unused ALPN extension handling, improving code clarity and maintainability.	2026-03-18 01:40:38 +04:00
David Osipov	6ffbc51fb0	security: harden handshake/masking flows and add adversarial regressions ... - forward valid-TLS/invalid-MTProto clients to mask backend in both client paths\n- harden TLS validation against timing and clock edge cases\n- move replay tracking behind successful authentication to avoid cache pollution\n- tighten secret decoding and key-material handling paths\n- add dedicated security test modules for tls/client/handshake/masking\n- include production-path regression for ClientHandler fallback behavior	2026-03-16 20:04:41 +04:00
Alexey	f86ced8e62	Rename AGENTS_SYSTEM_PROMT.md to AGENTS.md	2026-02-23 19:43:34 +03:00
Alexey	e2e471a78c	Delete AGENTS.md	2026-02-23 19:43:03 +03:00
Alexey	d888df6382	Update AGENTS.md	2026-02-16 23:33:09 +03:00
vladon	303a6896bf	AGENTS.md	2026-02-16 16:59:29 +03:00