Commit ac899e2
committed
fix(security): address audit findings — meili key, vite CVEs, SQL injection
- S-1: Replace hardcoded "devkey123" Meilisearch master key with
auto-generated key persisted to ~/.4dpocket/meili_master_key
- S-2: Bump vite from ^8.0.1 to ^8.0.5 (resolved to 8.0.8) fixing
2 HIGH CVEs (file read + fs.deny bypass)
- S-3: Fix SQL injection in db reset PostgreSQL path — use psql --set
parameter binding instead of f-string interpolation1 parent bbf3a38 commit ac899e2
3 files changed
Lines changed: 119 additions & 107 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
46 | 46 | | |
47 | 47 | | |
48 | 48 | | |
49 | | - | |
| 49 | + | |
50 | 50 | | |
51 | 51 | | |
0 commit comments