Skip to content

Improve/team security flagging safety - #1882

Open
oraimoitel wants to merge 3 commits into
Stellar-Mail:mainfrom
oraimoitel:improve/team-security-flagging-safety
Open

Improve/team security flagging safety#1882
oraimoitel wants to merge 3 commits into
Stellar-Mail:mainfrom
oraimoitel:improve/team-security-flagging-safety

Conversation

@oraimoitel

Copy link
Copy Markdown

closes #702

kryputh and others added 3 commits July 25, 2026 19:09
Expand unit tests for filterAuditEvents, hasActiveAuditFilter,
formatEventAsText, and CATEGORY_FOR_KIND from 7 to 21 tests.

Add Playwright E2E spec covering event rendering, category
filtering, search, empty states, copy/export buttons, and count.
Add regression coverage for audit log feature
Closes Stellar-Mail#964
- docs/THREAT_MODEL.md — document threat assumptions, unsafe input
  catalog, and mitigation strategies for all field types
- docs/PERFORMANCE.md — document O(n) characteristics of classifyEmail,
  per-field validation costs, large-dataset guidance, batch guidance
- guards/security-guards.mjs — pre-validation size guard (rejects payloads
  >64 KB before any work), dedup batch-size guard, composite guardAndValidate
- tests/security-guards.test.mjs — 14 tests covering guard success paths,
  edge cases (null, arrays, size boundaries), and stable LIMITS contract
- index.ts — export guard functions and types
- README.md — update folder structure, test count, acceptance checklist
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[V2][team] Team Security Flagging - Security and performance hardening

2 participants