Repository navigation

fix(security): remediation bundle — AES-256-GCM, DOMPurify, WebSocket auth, 4 CVEs, SonarCloud - #191

Closed

BillyOutlast wants to merge 23 commits into

rebuildfrom

fix/security-remediation-rebuild

Closed

fix(security): remediation bundle — AES-256-GCM, DOMPurify, WebSocket auth, 4 CVEs, SonarCloud#191
BillyOutlast wants to merge 23 commits into
rebuildfrom
fix/security-remediation-rebuild

Commits on Jul 28, 2026
- fix(security): remediation bundle — AES-256-GCM, DOMPurify, WebSocket auth, 4 CVEs, SonarCloud
  John Smith
  committed
  6624995
- fix(review): address AI scanner findings
  John Smith
  committed
  f08fe6e
- fix(review): address second OCR scan findings (#193-#197)
  John Smith
  committed
  957e149
- fix(review): collapse redundant if/else in droplet-interface.ts
  John Smith
  committed
  68b49b8
- fix(review): address third OCR scan (#191)
  John Smith
  committed
  95c672f
- fix(review): address fourth OCR scan — key zeroing, URI regexp, WS hardening
  John Smith
  committed
  ce4404d
- fix(review): fix URI regexp regression + WS dead code
  John Smith
  committed
  a88864e
- fix(ci): allow sonar-pr-comment to run when quality gate fails
  John Smith
  committed
  5286f72
- fix(review): minor cleanup — semver consistency + sanitize error logging
  John Smith
  committed
  8f98e92
- fix(review): expose resetHooks() for test/HMR cleanup
  John Smith
  committed
  3e7bf2d
- fix(review): DoS timeout, remove ftp from URI regexp, add auth failure log
  John Smith
  committed
  c6790e2
- fix(review): address OCR timeout suggestions + fix CI lint + cargo audit
  John Smith
  committed
  773a8f1
- chore(hooks): add ocr review to pre-push hook
  John Smith
  committed
  b396cbc
- chore(hooks): add non-blocking ocr review to pre-push hook
  John Smith
  committed
  a67ea0b
- fix(review): address OCR race condition + hook cleanup findings
  John Smith
  committed
  357606f
- fix(review): address 12 OCR findings across 6 files
  John Smith
  committed
  09991f1
- fix(hooks): refine base branch detection — skip self-tracking upstream
  John Smith
  committed
  863ca0b
- chore: sync pnpm-lock after removing dompurify dep
  John Smith
  committed
  8439c5e
- fix(hooks): mktemp template — move XXXXXX to end for macOS compat
  John Smith
  committed
  094f9f7
- fix(hooks): make ocr review blocking on push
  John Smith
  committed
  981b638
- fix: resolve 7 remediation items from AI scanners (OCR/Sourcery/CodeRabbit)
  John Smith
  committed
  05cbbe8
Commits on Jul 29, 2026
- fix: resolve 2 open PR review threads
  John Smith
  committed
  708b123
- chore: add fallow-ignore-file to false-positive files
  John Smith
  committed
  e94289f

Commits

Commits on Jul 28, 2026

Commits on Jul 29, 2026