Drew Newberry d4f5034d7f fix(gateway)!: make the WebSocket tunnel opt-in (#3727) ...

The /_ws_tunnel endpoint pipes a WebSocket into the full gRPC service. On a
plaintext loopback gateway any web page could open it, since browsers do not
apply CORS to WebSocket upgrades. Mount the tunnel only when
enable_websocket_tunnel is set (config file, --enable-websocket-tunnel, or
OPENSHELL_ENABLE_WEBSOCKET_TUNNEL; server.enableWebsocketTunnel in Helm).

BREAKING CHANGE: gateways behind an authenticating edge proxy must set
enable_websocket_tunnel = true for CLI edge-tunnel connections.

Signed-off-by: Drew Newberry <anewberry@nvidia.com>

2026-09-25 23:43:18 +00:00

..

openshell-binary-identity

…

openshell-bootstrap

…

openshell-cli

docs: refresh architecture and agent guides (#3705)

2026-09-25 02:38:00 -07:00

openshell-conformance

fix(policy): propose rules for unknown DNS hosts (#3707)

2026-09-25 08:28:41 +00:00

openshell-conformance-cli

fix(policy): restore policy.local and proposal conformance (#3689)

2026-09-24 21:03:26 -07:00

openshell-core

fix(gateway)!: make the WebSocket tunnel opt-in (#3727)

2026-09-25 23:43:18 +00:00

openshell-driver-db-credstore

…

openshell-driver-docker

docs: refresh architecture and agent guides (#3705)

2026-09-25 02:38:00 -07:00

openshell-driver-kubernetes

(Fix) ha sandbox resilience with k8s (#3644)

2026-09-25 18:10:55 +00:00

openshell-driver-kubernetes-secrets

…

openshell-driver-mxc

docs: refresh architecture and agent guides (#3705)

2026-09-25 02:38:00 -07:00

openshell-driver-podman

docs: refresh architecture and agent guides (#3705)

2026-09-25 02:38:00 -07:00

openshell-driver-vault

…

openshell-driver-vm

docs: refresh architecture and agent guides (#3705)

2026-09-25 02:38:00 -07:00

openshell-extension-core

…

openshell-gateway

fix(vm): confine OCI layer application to the rootfs (#3550)

2026-09-24 17:22:46 +00:00

openshell-gateway-interceptors

…

openshell-isolation-interface

fix(sandbox): deliver complete exec output before success (#3688)

2026-09-25 04:03:49 +00:00

openshell-ocsf

…

openshell-otel

…

openshell-otel-test-support

…

openshell-policy

…

openshell-policy-schema

…

openshell-prover

…

openshell-prover-cli

docs: refresh architecture and agent guides (#3705)

2026-09-25 02:38:00 -07:00

openshell-providers

…

openshell-sandbox

fix(sandbox): deliver complete exec output before success (#3688)

2026-09-25 04:03:49 +00:00

openshell-sandbox-backend

fix(sandbox): deliver complete exec output before success (#3688)

2026-09-25 04:03:49 +00:00

openshell-sdk

…

openshell-server

fix(gateway)!: make the WebSocket tunnel opt-in (#3727)

2026-09-25 23:43:18 +00:00

openshell-server-macros

…

openshell-supervisor

…

openshell-supervisor-middleware

…

openshell-supervisor-middleware-builtins

…

openshell-supervisor-network

fix(policy): propose rules for unknown DNS hosts (#3707)

2026-09-25 08:28:41 +00:00

openshell-supervisor-process

fix(sandbox): deliver complete exec output before success (#3688)

2026-09-25 04:03:49 +00:00

openshell-tui

…

openshell-vfio

…