Michael Freno 3bb3e80b77 security: lock down public S3 procedures and sanitize keys (p8-001, p8-008) ...

- Convert simpleDeleteImage, deleteImage, getPreSignedURL, listAttachments
  from publicProcedure to csrfProtectedProcedure
- Add S3 type allowlist validation to prevent path traversal
- Sanitize title/filename inputs for S3 key construction
- Add ownership checks on delete operations
- Remove hashPassword/checkPassword procedures (bcrypt internals)
- Add regression tests for sanitization and validation

Fixes: p8-001 (anonymous S3 deletion), p8-008 (public presigned URL with unsanitized type)

2026-07-22 17:37:58 -04:00

..

lineage

lineage analytics

2026-07-13 13:26:08 -04:00

account.ts

checkpoint

2026-01-21 12:22:19 -05:00

analytics.ts

fix: analytics and deprecated warning

2026-01-21 13:58:34 -05:00

apple-notifications.test.ts

fix: analytics and deprecated warning

2026-01-21 13:58:34 -05:00

apple-notifications.ts

cairn work

2026-01-21 01:56:54 -05:00

audit.ts

security hardening

2025-12-28 20:04:29 -05:00

auth.ts

security cleanup, fix turnstile

2026-05-28 16:48:06 -04:00

blog.ts

session state simplification

2026-01-12 09:24:58 -05:00

database.ts

security cleanup, fix turnstile

2026-05-28 16:48:06 -04:00

downloads.test.ts

quick fix

2026-02-02 15:24:28 -05:00

downloads.ts

input halo sections, sparkle handling

2026-04-30 06:38:54 -04:00

git-activity.ts

fix github activity

2026-04-06 14:41:30 -04:00

infill.ts

session state simplification

2026-01-12 09:24:58 -05:00

lineage.ts

removed excess comments

2026-01-04 11:14:54 -05:00

misc.test.ts

security: lock down public S3 procedures and sanitize keys (p8-001, p8-008)

2026-07-22 17:37:58 -04:00

misc.ts

security: lock down public S3 procedures and sanitize keys (p8-001, p8-008)

2026-07-22 17:37:58 -04:00

nessa-community-authz.test.ts

fix(p8-003): enforce club membership checks on 7 community endpoints

2026-07-22 16:58:08 -04:00

nessa-community-authz.ts

fix(p8-003): enforce club membership checks on 7 community endpoints

2026-07-22 16:58:08 -04:00

nessa-community.ts

fix(p8-003): enforce club membership checks on 7 community endpoints

2026-07-22 16:58:08 -04:00

nessa.ts

security cleanup, fix turnstile

2026-05-28 16:48:06 -04:00

post-history.ts

fix rate limit async issue, kill old code

2026-01-06 23:52:51 -05:00

user.ts

checkpoint

2026-01-21 12:22:19 -05:00