Fix various small issues #46

Merged

BlakeRain merged 2 commits from security/audit-fixes into main

2026-05-25 19:03:03 +00:00

BlakeRain commented

2026-05-25 16:17:03 +00:00

Owner

Pin poem-route-macro to v0.1.1 from blakerain registry
Sanitize preview command stderr, log server-side only, store generic message in DB
Add startup cleanup of stale temp files in cache/temp/ (24h threshold)
Add audit logging for admin masquerade/unmasquerade
Cookie key warn on restart, team tag CSRF 401 to 403, transfer CSRF order, admin EditTeamForm validate_slug
Add slug character validation in team settings handler
Add Cypress test for team settings slug validation
Add validation to UserSettingsForm, upload custom_slug, tag names; add preview command timeout
Add Cypress tests for user settings validation, upload slug validation, and tag name validation
Convert signout to two-step confirmation page

- Pin poem-route-macro to v0.1.1 from blakerain registry - Sanitize preview command stderr, log server-side only, store generic message in DB - Add startup cleanup of stale temp files in `cache/temp/` (24h threshold) - Add audit logging for admin masquerade/unmasquerade - Cookie key warn on restart, team tag CSRF 401 to 403, transfer CSRF order, admin `EditTeamForm` `validate_slug` - Add slug character validation in team settings handler - Add Cypress test for team settings slug validation - Add validation to `UserSettingsForm`, upload `custom_slug`, tag names; add preview command timeout - Add Cypress tests for user settings validation, upload slug validation, and tag name validation - Convert signout to two-step confirmation page

BlakeRain added the

labels

2026-05-25 16:17:03 +00:00

BlakeRain self-assigned this

2026-05-25 16:17:03 +00:00

BlakeRain added 1 commit

2026-05-25 16:17:03 +00:00

security: fix various small issues

Check / check (pull_request) Failing after 1m53s

Details

8c179778d4

- pin poem-route-macro to v0.1.1 from blakerain registry
- sanitize preview command stderr, log server-side only, store generic message in DB
- add startup cleanup of stale temp files in `cache/temp/` (24h threshold)
- add audit logging for admin masquerade/unmasquerade
- cookie key warn on restart, team tag CSRF 401 to 403, transfer CSRF order, admin `EditTeamForm` `validate_slug`
- add slug character validation in team settings handler
- add Cypress test for team settings slug validation
- add validation to `UserSettingsForm`, upload `custom_slug`, tag names; add preview command timeout
- add Cypress tests for user settings validation, upload slug validation, and tag name validation
- convert signout to two-step confirmation page

BlakeRain added 1 commit

2026-05-25 16:40:51 +00:00

fix(clippy): lint issues

Check / check (pull_request) Successful in 5m0s

Details

b40544c36d

BlakeRain merged commit dedb416280 into main

2026-05-25 19:03:03 +00:00

BlakeRain referenced this pull request from a commit

2026-05-25 19:03:04 +00:00

Merge pull request 'Fix various small issues' (#46) from security/audit-fixes into main

No reviewers

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

BlakeRain/parcel!46

No description provided.

Rows
Columns