Release v2.83.1 - Security Fixes & Global Context v4.0

- Fix cookie injection vulnerability in project folder names
- Fix path injection in context type file paths
- Enhanced AI development guidelines (Global Context v4.0)
- Persistent project auth secret survives restarts
- CORS headers for static files (fixes ORB/CORS errors)
- Update flow improvements with better service restart handling

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: Fotios Tsakiridis

CHANGELOG.md

@@ -5,6 +5,35 @@ All notable changes to CodeHero will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.83.1] - 2026-01-25
+
+### Security
+- **Fixed Cookie Injection** - Sanitized project folder names in cookie names/paths
+- **Fixed Path Injection** - Added extra validation for context type in file paths
+
+### Improved
+- **Global Context v4.0** - Enhanced AI development guidelines
+  - Mandatory 7-step workflow for all tasks
+  - Verification Protocol with syntax check, log check, and visual verification
+  - Multi-platform visual verification (Playwright for web, ADB for Android, simctl for iOS, etc.)
+  - Stricter code quality rules (no minified code, no CDN, relative paths only)
+  - Mandatory project documentation (technologies.md, map.md)
+
+- **Persistent Project Auth Secret** - Session cookies now last full 7 days
+  - Secret stored in `/opt/codehero/data/project_auth_secret`
+  - Survives server restarts (previously regenerated on each restart)
+
+- **CORS Headers for Static Files** - Fixed cross-origin resource loading
+  - Added `Access-Control-Allow-Origin: *` to static file responses
+  - Added `Cross-Origin-Resource-Policy: cross-origin`
+  - Added `Cross-Origin-Embedder-Policy: unsafe-none`
+  - Fixes ORB/CORS errors when accessing projects from different origins
+
+- **Update Flow Improvements** - Better handling of server restart
+  - Increased wait time before checking server (2s → 5s)
+  - Added 5-second wait for services after server responds
+  - Better feedback during restart ("Waiting for services...")
+
 ## [2.83.0] - 2026-01-24
 
 ### Added

INSTALL.md

@@ -12,7 +12,7 @@
 
 ```bash
 cd /root
-unzip codehero-2.83.0.zip
+unzip codehero-2.83.1.zip
 cd codehero
 ```
 
@@ -129,8 +129,8 @@ sudo systemctl restart codehero-web codehero-daemon
 ```bash
 # Download and extract new version
 cd /root
-wget https://github.com/fotsakir/codehero/releases/latest/download/codehero-2.83.0.zip
-unzip codehero-2.83.0.zip
+wget https://github.com/fotsakir/codehero/releases/latest/download/codehero-2.83.1.zip
+unzip codehero-2.83.1.zip
 cd codehero
 
 # Preview what will change (recommended)

README.md

@@ -11,7 +11,7 @@
 
 <p align="center">
   <a href="LICENSE"><img src="https://img.shields.io/badge/License-Dual-blue.svg" alt="License"></a>
-  <a href="CHANGELOG.md"><img src="https://img.shields.io/badge/version-2.83.0-green.svg" alt="Version"></a>
+  <a href="CHANGELOG.md"><img src="https://img.shields.io/badge/version-2.83.1-green.svg" alt="Version"></a>
   <img src="https://img.shields.io/badge/Ubuntu-22.04%20|%2024.04-orange.svg" alt="Ubuntu">
   <a href="https://anthropic.com"><img src="https://img.shields.io/badge/Powered%20by-Claude%20AI-blueviolet.svg" alt="Claude AI"></a>
   <a href="https://github.com/fotsakir/codehero/stargazers"><img src="https://img.shields.io/github/stars/fotsakir/codehero?style=social" alt="Stars"></a>
@@ -378,8 +378,8 @@ apt-get update && apt-get install -y unzip wget net-tools
 
 # Download and extract
 cd /root
-wget https://github.com/fotsakir/codehero/releases/latest/download/codehero-2.83.0.zip
-unzip codehero-2.83.0.zip
+wget https://github.com/fotsakir/codehero/releases/latest/download/codehero-2.83.1.zip
+unzip codehero-2.83.1.zip
 cd codehero
 
 # Run setup
@@ -405,7 +405,7 @@ The installer automatically sets up:
 ```bash
 # Download new version
 cd /root
-unzip codehero-2.83.0.zip
+unzip codehero-2.83.1.zip
 cd codehero
 
 # Preview changes (recommended)

VERSION

@@ -1 +1 @@
-2.83.0
+2.83.1