fix(security): harden security across auth, API, frontend, and infra#10

Merged

thlaure merged 11 commits into

fix/security-vulnerabilities

Mar 15, 2026

Commits on Mar 14, 2026

fix(security): add AccessDeniedException and SSRF protection

Thomas Laure
and
claude
committed
fix(auth): prevent user enumeration and enforce password strength

Thomas Laure
and
claude
committed
fix(frontend): sanitize article HTML content with DOMPurify

Thomas Laure
and
claude
committed
fix(security): harden infra and prevent internal error leakage

Thomas Laure
and
claude
committed
ci: add security audit steps and enforce quality gates

Thomas Laure
and
claude
committed
chore(claude): update new-feature workflow with security step

Thomas Laure
and
claude
committed
fix(ci): add typecheck script and fix composer audit exit code

Thomas Laure
and
claude
committed
fix(deps): resolve npm audit high/moderate vulnerabilities

Thomas Laure
and
claude
committed
fix(ci): correctly handle composer audit exit codes under set -e

Thomas Laure
and
claude
committed

Commits on Mar 15, 2026

fix(test): replace test password to avoid secret scanner false positive

Thomas Laure
and
claude
committed
chore(ci): bump setup-buildx-action to v4 for Node.js 24

Thomas Laure
and
claude
committed