ShieldAI/.turbo/cache/df8d582601d96e8d-meta.json at 6c4d0b91caac67f8814e342b07c58df478f9574c - ShieldAI - Gitea: Git with a cup of tea

Mike/ShieldAI

Files

Michael Freno 0afdf8b6e8 FRE-4500: Fix security review findings (Critical/High/Medium/Low)

- Critical #1: Add auth check to ingest endpoints (use request.user.id)
- Critical #2: Add IDOR protection on group endpoints (userId ownership)
- High #3: Register auth middleware in server.ts (populates request.user)
- High #4: Add Fastify schema validation to all route handlers
- Medium #5: Add NormalizedAlert/CorrelationGroup models to Prisma schema
- Medium #6: Sanitize payload storage in normalizer (depth limit, circular ref)
- Low #7: Restrict CORS origins (use CORS_ORIGIN env var)
Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-05-02 16:40:01 -04:00

1 line

171 B

JSON

Raw Blame History

{"hash":"df8d582601d96e8d","duration":684,"sha":"274afa63352200107e5e3ed5a783555fe3c68e37","dirty_hash":"1b22568f1b7a3df274940e36b290211b3251b700c1e1286bc843ed3e00b07e05"}