03ba19042d
All checks were successful
Build & Push Container Image / build (push) Successful in 11s
1. AdfRenderer: validate href starts with https?:// before rendering links 2. Logout route: add requireAuth middleware 3. Jira API params: validate sprintId, boardId, issueIdOrKey are alphanumeric 4. CSP header: add Content-Security-Policy with restrictive defaults 5. OAuth callback: align frontendUrl fallback with index.js 6. Rate limiting: express-rate-limit on API routes + Socket.IO event throttling 7. Session KV keys: prefix with cloudId for tenant isolation defense-in-depth 8. saveScopedEstimate: use withSessionCas for atomic read-update-delete Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
25 lines
552 B
JSON
25 lines
552 B
JSON
{
|
|
"name": "pokerface-backend",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"type": "module",
|
|
"main": "src/index.js",
|
|
"scripts": {
|
|
"dev": "nodemon src/index.js",
|
|
"start": "node src/index.js"
|
|
},
|
|
"dependencies": {
|
|
"@mickl/socket.io-nats-adapter": "^2.0.0",
|
|
"cookie-parser": "^1.4.7",
|
|
"cors": "^2.8.5",
|
|
"dotenv": "^16.4.5",
|
|
"express": "^4.21.1",
|
|
"express-rate-limit": "^8.2.1",
|
|
"jsonwebtoken": "^9.0.3",
|
|
"nats": "^2.28.2",
|
|
"socket.io": "^4.8.1"
|
|
},
|
|
"devDependencies": {
|
|
"nodemon": "^3.1.7"
|
|
}
|
|
}
|