Repository navigation

fix(security): 🔒 harden auth, rate limiting, uploads, headers, logs and dependencies - #850

Merged

aXenDeveloper merged 25 commits into

canaryfrom

claude/security-hardening

Oct 9, 2026

Merged

fix(security): 🔒 harden auth, rate limiting, uploads, headers, logs and dependencies#850
aXenDeveloper merged 25 commits into
canaryfrom
claude/security-hardening

Commits on Oct 9, 2026
- fix(api): 🔒 resolve real client IPs for the in-process API and behind trusted proxies
  
  claude
  authored and
  aXenDeveloper
  committed
  78abbf2
- fix(api): 🔒 add security headers and a stricter rate limit for credential routes
  
  claude
  authored and
  aXenDeveloper
  committed
  3f74868
- fix(security): 🔒 ignore every .env mode file and the Docker Postgres data dir
  
  claude
  authored and
  aXenDeveloper
  committed
  f6eb742
- fix(security): 🔒 redact bound query params and echoed values from error logs
  
  claude
  authored and
  aXenDeveloper
  committed
  388621f
- fix(security): 🔒 log and throw only the API path from the fetcher
  
  claude
  authored and
  aXenDeveloper
  committed
  b41ad7c
- fix(security): 🔒 keep the content revalidation bearer off weak secrets and plain http
  
  claude
  authored and
  aXenDeveloper
  committed
  a419d86
- fix(api): 🐛 read NODE_MAILER_USER for the nodemailer adapter
  
  claude
  authored and
  aXenDeveloper
  committed
  45eff7e
- chore(deps): ⬆️ patch next, seroval, esbuild and http-cache-semantics advisories
  
  claude
  authored and
  aXenDeveloper
  committed
  29687ae
- feat(auth): 🔒 enforce email verification and harden sign-in responses
  
  claude
  authored and
  aXenDeveloper
  committed
  c517ebe
- fix(api): 🔒 put the email verification routes on the credential rate limit
  
  claude
  authored and
  aXenDeveloper
  committed
  08adf02
- fix(admin): 🔒 stop limited admins from demoting or removing more privileged staff
  
  claude
  authored and
  aXenDeveloper
  committed
  31e162b
- fix(content): 🔒 only accept file references the caller may use
  
  claude
  authored and
  aXenDeveloper
  committed
  c166d3c
- fix(admin): 🔒 require a dedicated permission to rebuild or clear the search index
  
  claude
  authored and
  aXenDeveloper
  committed
  d00b1be
- test(admin): 🧪 assert every admin route requires a staff permission
  
  claude
  authored and
  aXenDeveloper
  committed
  8446f81
- fix(admin): 🔒 hide search rebuild and clear actions without can_manage_search
  
  claude
  authored and
  aXenDeveloper
  committed
  9377f19
- fix(storage): 🔒 cap decoded image pixels and verify declared image types
  
  claude
  authored and
  aXenDeveloper
  committed
  cb8bd70
- docs(storage): 🔒 mount storageStaticHeadersMiddleware in local upload snippets
  
  claude
  authored and
  aXenDeveloper
  committed
  18b1a25
- docs(storage): 📝 format image optimization config snippet
  
  claude
  authored and
  aXenDeveloper
  committed
  eba45fe
- fix(start): 🔒 send anti-clickjacking and hardening headers with HTML documents
  
  claude
  authored and
  aXenDeveloper
  committed
  6b05d22
- fix(search): 🔒 validate and clamp the Elasticsearch result cursor
  
  claude
  authored and
  aXenDeveloper
  committed
  2742d3e
- fix(api): 🔒 escape LIKE wildcards in paginated and role-name searches
  
  claude
  authored and
  aXenDeveloper
  committed
  9607279
- fix(widgets): 🔒 render Hero and Call to action links only for safe hrefs
  
  claude
  authored and
  aXenDeveloper
  committed
  ca3f844
- refactor(elasticsearch): ♻️ keep the search offset clamp local to the adapter
  
  claude
  authored and
  aXenDeveloper
  committed
  807eeba
- fix(rebase): 🐛 reconcile security hardening with canary's oxlint and AI routes
  
  aXenDeveloper
  and
  claude
  committed
  a35a632
- refactor(emails): ✨ Simplify email templates by introducing `ActionLinkEmail` component
  aXenDeveloper
  committed
  1f8836d

Commits

Commits on Oct 9, 2026