Signal K Server: Buffered logs exposed to unauthenticated WebSocket clients
### Summary An unauthenticated WebSocket client can subscribe to the log path and receive buffered server logs. WebSocket connections are intentionally permitted before authentication because login occurs over the WebSocket connection. However, the log subscription path does not enforce an authoriza
### Summary An unauthenticated WebSocket client can subscribe to the log path and receive buffered server logs. WebSocket connections are intentionally permitted before authentication because login occurs over the WebSocket connection. However, the log subscription path does not enforce an authorization check. `processSubscribe` handles subscriptions to the log path separately, without applying access control: ```ts if ( Array.isArray(msg.subscribe) && msg.subscribe.length > 0 &&…