Skip to content

x402-gateway 0.10.1: AI chat bots welcome, search crawlers verified by address - #92

Merged
ralyodio merged 1 commit into
masterfrom
x402-gateway-0.10.1
Oct 19, 2026
Merged

ralyodio merged 1 commit into
masterfrom
x402-gateway-0.10.1

Conversation

@ralyodio

Copy link
Copy Markdown
Contributor

Anthony 2026-10-19 (bot hits decisions): sweep every site to the latest gateway;
"allow apple/google/cloudflare/bing etc. and ai chat bots".

  • Verified Googlebot/bingbot/Applebot/DuckDuckBot/Cloudflare (full published
    lists, IPv4+IPv6) unmetered; the same strings from elsewhere are charged.
  • ChatGPT-User/OAI-SearchBot/Perplexity (from their published addresses),
    Claude-User, Claude-SearchBot, meta-externalfetcher, meta-webindexer, YouBot,
    ExaSearchBot, AionBot: welcome, unmetered, never challenged.
  • From 0.8: headless browsers, SEO resellers, stale desktop UA pools and
    Amazonbot are charged; training crawlers still pay.

🤖 Generated with Claude Code

…y published address

Anthony 2026-10-19 (bot hits decisions): sweep every site to the latest gateway;
"allow apple/google/cloudflare/bing etc. and ai chat bots".

- Verified Googlebot/bingbot/Applebot/DuckDuckBot/Cloudflare (full published
  lists, IPv4+IPv6) unmetered; the same strings from elsewhere are charged.
- ChatGPT-User/OAI-SearchBot/Perplexity (from their published addresses),
  Claude-User, Claude-SearchBot, meta-externalfetcher, meta-webindexer, YouBot,
  ExaSearchBot, AionBot: welcome, unmetered, never challenged.
- From 0.8: headless browsers, SEO resellers, stale desktop UA pools and
  Amazonbot are charged; training crawlers still pay.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​profullstack/​footer@​0.2.1 ⏵ 0.2.578 +4100100 +194 +5100
Updated@​profullstack/​x402-gateway@​0.7.0 ⏵ 0.10.180 -3100100 +195 +1100

View full report

@github-actions

Copy link
Copy Markdown

ThreatCrush Security Scan

38 finding(s)

MEDIUM: 32 | LOW: 6

Severity Rule Location
MEDIUM sql-template-interpolation apps/web/app/api/bounties/[id]/claim/route.ts:18
MEDIUM sql-template-interpolation apps/web/app/api/bounties/[id]/claim/route.ts:34
MEDIUM sql-template-interpolation apps/web/app/api/bounties/[id]/claim/route.ts:43
MEDIUM sql-template-interpolation apps/web/app/api/bounties/route.ts:81
MEDIUM sql-template-interpolation apps/web/app/api/coupons/route.ts:68
MEDIUM sql-template-interpolation apps/web/app/api/coupons/route.ts:75
MEDIUM sql-template-interpolation apps/web/app/api/coupons/vote/route.ts:31
MEDIUM sql-template-interpolation apps/web/app/api/coupons/vote/route.ts:33
MEDIUM sql-template-interpolation apps/web/app/api/stores/[slug]/route.ts:9
MEDIUM sql-template-interpolation apps/web/app/api/webhooks/crawlproof/route.ts:83
MEDIUM sql-template-interpolation apps/web/app/api/webhooks/crawlproof/route.ts:90
MEDIUM js-open-redirect apps/web/app/bounties/new/page.tsx:57
MEDIUM js-unescaped-html-sink apps/web/app/coupons/[id]/page.tsx:57
MEDIUM js-unescaped-html-sink apps/web/app/layout.tsx:89
MEDIUM sql-template-interpolation apps/web/app/stores/[slug]/page.tsx:16
MEDIUM js-unescaped-html-sink apps/web/components/PitFooter.tsx:24
MEDIUM sql-template-interpolation apps/web/lib/bbs-post.ts:164
MEDIUM sql-template-interpolation apps/web/lib/flipp-sync.ts:445
MEDIUM sql-template-interpolation apps/web/lib/inbound-email.ts:573
MEDIUM sql-template-interpolation apps/web/lib/inbound-email.ts:643
MEDIUM sql-template-interpolation apps/web/lib/mcp-tools.ts:81
MEDIUM sql-template-interpolation apps/web/lib/members.ts:54
MEDIUM sql-template-interpolation apps/web/lib/nichedb-sync.ts:186
MEDIUM sql-template-interpolation apps/web/lib/nichedb-sync.ts:206
MEDIUM sql-template-interpolation apps/web/lib/reddit-sync.ts:336
MEDIUM sql-template-interpolation apps/web/lib/reddit-sync.ts:355
MEDIUM sql-template-interpolation apps/web/lib/reddit-sync.ts:361
MEDIUM sql-template-interpolation apps/web/lib/reveal-coupon.ts:115
MEDIUM sql-template-interpolation apps/web/lib/reveal-coupon.ts:170
MEDIUM sh-predictable-temp-path apps/web/public/install.sh:37
MEDIUM sh-predictable-temp-path apps/web/public/install.sh:39
MEDIUM sql-template-interpolation apps/web/scripts/migrate.mjs:192
LOW sql-template-interpolation test/bbs-post.test.mjs:129
LOW sql-template-interpolation test/bbs-post.test.mjs:143
LOW sql-template-interpolation test/bbs-post.test.mjs:164
LOW sql-template-interpolation test/inbound-email.test.mjs:139
LOW sql-template-interpolation test/reveal-sweep.test.mjs:69
LOW sql-template-interpolation test/reveal-sweep.test.mjs:112

Snippets are redacted; ThreatCrush never prints matched credential material.

@ralyodio
ralyodio merged commit c9cbf54 into master Oct 19, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant