Migrations/bookorbit
1
0
Fork 0
mirror of https://github.com/bookorbit/bookorbit.git synced 2026-11-03 00:11:37 -06:00
Code Issues Packages Projects Releases Wiki Activity

fix(security): complete sanitizeLogValue sweep, DOMParser stripHtml, least-privilege CI permissions, pin Dockerfile image

Browse Source
This commit is contained in:
neon
2026-05-14 23:37:32 +00:00
parent 86147ead2c
commit 3138cf3a4d
38 changed files with 322 additions and 108 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/SECURITY.md
+1 -1
View File
@@ -2,6 +2,6 @@
## Reporting a Vulnerability
Use GitHub's [private vulnerability reporting](../../security/advisories/new) to report security issues confidentially. Do not open public issues for security vulnerabilities.
Use GitHub's [private vulnerability reporting](https://github.com/bookorbit/bookorbit/security/advisories/new) to report security issues confidentially. Do not open public issues for security vulnerabilities.
I aim to acknowledge reports within a few days and publish a fix as quickly as the severity warrants.