mirror of
https://github.com/Wei-Shaw/sub2api.git
synced 2026-10-07 17:27:58 +08:00
Stop WebSocket follow-up turns from reusing a request-wide audit cache, scan client-controlled instruction fields, fail closed on stale weaker configs, and tighten preview/SSRF controls including persisted request stage. Co-authored-by: Cursor <cursoragent@cursor.com>