fix(app): enforce authenticated ephemeral local SOCKS5 #9

Merged
Naveax merged 1 commits from pr/enforce-authenticated-local-socks into main 2026-09-06 11:18:35 +03:00
Naveax commented 2026-09-03 23:28:51 +03:00 (Migrated from github.com)

Summary

Tighten the local SOCKS5 runtime and diagnostic path.

Changes

  • Require an explicit ephemeral SOCKS port
  • Require username/password authentication
  • Remove unauthenticated SOCKS5 fallback behavior
  • Replace supplied inbound listeners with the ReVolt-owned loopback SOCKS inbound
  • Keep the listener bound to 127.0.0.1
  • Use one total read deadline for SOCKS diagnostics

This keeps local proxy access scoped to the active ReVolt session.

## Summary Tighten the local SOCKS5 runtime and diagnostic path. ## Changes - Require an explicit ephemeral SOCKS port - Require username/password authentication - Remove unauthenticated SOCKS5 fallback behavior - Replace supplied inbound listeners with the ReVolt-owned loopback SOCKS inbound - Keep the listener bound to 127.0.0.1 - Use one total read deadline for SOCKS diagnostics This keeps local proxy access scoped to the active ReVolt session.
Sign in to join this conversation.