claude

wtclaude created pull request RunicGateway/website#18

2026-07-03 02:42:33 +00:00

Derive uploaded file extension from mimetype, not originalname (fixes #11)

wtclaude created branch fix/upload-extension-xss in RunicGateway/website

2026-07-03 02:42:01 +00:00

wtclaude pushed to fix/upload-extension-xss at RunicGateway/website

2026-07-03 02:42:01 +00:00

e84835a0fb Derive uploaded file extension from mimetype, not originalname (#11)

wtclaude created pull request RunicGateway/website#17

2026-07-03 02:38:51 +00:00

Validate and uniqueness-check username on user update (fixes #13)

wtclaude created branch fix/username-validation-update in RunicGateway/website

2026-07-03 02:38:25 +00:00

wtclaude pushed to fix/username-validation-update at RunicGateway/website

2026-07-03 02:38:25 +00:00

43db509293 Validate and uniqueness-check username on user update (#13)

wtclaude created pull request RunicGateway/website#16

2026-07-03 02:23:05 +00:00

Re-validate JWT against the DB in isLoggedIn (fixes #12)

wtclaude created pull request RunicGateway/website#15

2026-07-03 02:22:23 +00:00

Enforce role-based authorization on admin-only routes (fixes #10)

wtclaude created branch fix/stale-jwt-revalidation in RunicGateway/website

2026-07-03 02:19:22 +00:00

wtclaude pushed to fix/stale-jwt-revalidation at RunicGateway/website

2026-07-03 02:19:22 +00:00

8ad18140d0 Re-validate JWT against the DB in isLoggedIn (#12)

wtclaude created branch fix/role-authorization in RunicGateway/website

2026-07-03 02:19:20 +00:00

wtclaude pushed to fix/role-authorization at RunicGateway/website

2026-07-03 02:19:20 +00:00

20d7150ab4 Enforce role-based authorization on admin-only routes (#10)

wtclaude opened issue RunicGateway/website#13

2026-07-02 01:20:46 +00:00

[Bug][Medium] username unvalidated and not uniqueness-checked on user update

wtclaude opened issue RunicGateway/website#14

2026-07-02 01:20:46 +00:00

[Bug][Medium] Server boots with no JWT_SECRET (only a warning)

wtclaude opened issue RunicGateway/website#11

2026-07-02 01:20:45 +00:00

[Security][High] Uploaded file extension is attacker-controlled → stored XSS

wtclaude opened issue RunicGateway/website#12

2026-07-02 01:20:45 +00:00

[Security][Medium] Stale JWT: demoted/deleted users keep access until token expiry

wtclaude opened issue RunicGateway/website#10

2026-07-02 01:20:44 +00:00

[Security][High] No role-based authorization — editor role is never enforced

wtclaude pushed to main at legis/legis

2026-07-01 10:48:03 +00:00

ebc5429c38 Phase 5: purity, ownership, and secret checkers

wtclaude pushed to main at legis/legis

2026-07-01 02:05:36 +00:00

47cead6960 Phase 4: type checker

wtclaude pushed to main at legis/legis

2026-07-01 01:54:07 +00:00

81541aa764 Phase 3: name resolution