Harden upload validation, token storage, auth revocation, and comment ownership - #146

Merged

zerox80 merged 11 commits into

mainfrom

security/harden-upload-auth-comments

Jul 2, 2026

Commits on Jul 2, 2026

Fix inverted allowlist check in upload magic-byte validation

zerox80
and
claude
committed
8f2f773
Hash tokens before storing them in the revocation blacklist

zerox80
and
claude
committed
86eeca1
Fail closed on blacklist DB errors in auth_middleware

zerox80
and
claude
committed
38007d0
Bind comment deletion to real identity, not the spoofable display name

zerox80
and
claude
committed
098c7e3
Rate limit the comment vote endpoint

zerox80
and
claude
committed
6856cfd
Require explicit opt-in for HSTS instead of trusting x-forwarded-proto

zerox80
and
claude
committed
a96e376
Pin backend Docker build to stable Rust instead of nightly

zerox80
and
claude
committed
c442043
Remove unused rehype-raw dependency

zerox80
and
claude
committed
2a35cd3
Address review findings: close ownership fallback gap, harden migration race, dedupe hashing

zerox80
and
claude
committed
5b39858
Backfill legacy plaintext token_blacklist rows to SHA-256 on upgrade

zerox80
and
claude
committed
85ebdc3
Harden comment ownership edge cases
zerox80
committed
91064a4