saopig1andClaude Opus 4.8 66230e6b43 fix(guest): normalize guestMode config on load + strict-boolean authorize gate ...

loadConfig now sanitizes guestMode the same way the write path does: bots is
coerced to "all" | string[] (numbers/objects/missing fall back to the default
"all"), and permissions are rebuilt from defaults with each known flag
strict-coerced to a boolean so a hand-edited/legacy/corrupt config.json can no
longer crash the gate or leak garbage index keys. The authorize guest gate now
uses === true instead of a truthy check.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-25 15:59:42 +08:00

..

api

fix(guest): deny operator personal-data reads to guests

2026-06-25 15:54:29 +08:00

auth

fix(auth): race-safe first-run setup + rolling cookie max-age refresh

2026-05-27 14:54:19 +08:00

middleware

fix(guest): normalize guestMode config on load + strict-boolean authorize gate

2026-06-25 15:59:42 +08:00

referrer-policy.test.ts

fix(web): referrer-policy same-origin so same-origin POSTs keep a real Origin

2026-05-29 21:25:20 +08:00

security-headers.test.ts

feat(auth): X-Frame-Options + CSP frame-ancestors clickjacking defence

2026-05-27 16:34:52 +08:00

server.ts

fix(guest): deny favorites + auth-status reads to guests; UI polish

2026-06-25 12:44:07 +08:00

websocket-auth.test.ts

feat(ws): scope guest WebSocket feed to allowed bots

2026-06-25 11:56:19 +08:00

websocket.ts

feat(ws): scope guest WebSocket feed to allowed bots

2026-06-25 11:56:19 +08:00