gongzhiyongandClaude Sonnet 4.6 60735de884 fix(security): strip Azure HTTP headers from thread config to prevent IP leak ...

The LangGraph API server injects all x-* request headers into
thread.config.configurable, which gets persisted and exposed via
POST /threads/search. This leaked Azure-injected headers (x-forwarded-for,
x-client-ip, x-arr-ssl, etc.) to any user.

Adds a Hono middleware (http.app) that strips sensitive infrastructure
headers at the HTTP layer before they reach the LangGraph API routes.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-12 20:48:06 +08:00

.claude/agents

feat: enterprise product sprint — log protocol, tool rules, UX polish

2026-04-12 13:01:02 +08:00

.github/workflows

feat: Phase 1 — ReAct loop + Markdown rendering + Docker deployment

2026-04-11 01:29:56 +08:00

doc

feat: Phase 1 — ReAct loop + Markdown rendering + Docker deployment

2026-04-11 01:29:56 +08:00

langgraph

fix(security): strip Azure HTTP headers from thread config to prevent IP leak

2026-04-12 20:48:06 +08:00

.DS_Store

feat: Phase 1 — ReAct loop + Markdown rendering + Docker deployment

2026-04-11 01:29:56 +08:00

.gitignore

Initialized repository for chat Gemini chat clone

2026-04-07 09:23:49 +00:00

CLAUDE.md

docs: fix CLAUDE.md — Supervisor uses AzureOpenAI not Gemini

2026-04-12 14:48:26 +08:00

docker-compose.yml

fix: use direct host IP http://192.168.30.30:2024 for LangGraph API

2026-04-11 13:36:37 +08:00

Makefile

feat: Phase 1 — ReAct loop + Markdown rendering + Docker deployment

2026-04-11 01:29:56 +08:00

test.md

feat: enterprise product sprint — log protocol, tool rules, UX polish

2026-04-12 13:01:02 +08:00

S

Description

No description provided

17 MiB

Languages

TypeScript 98%

CSS 1.1%

JavaScript 0.6%

Dockerfile 0.1%