Files
minio-webui/backend/package.json
T
paul a96f12dcb6
ci/woodpecker/push/woodpecker Pipeline was successful
fix: Security hardening, wizard bug fix, and UI redesign
- Fix QuickStartWizard error matching (services wrap errors in new Error(),
  losing err.response; now checks err.message as fallback)
- Add shellEscape() to all remaining unescaped CLI commands (removeUser,
  enableUser, disableUser, deletePolicy, attachPolicy, createPolicy)
- Fix inconsistent cookie secure flag in logout endpoint
- Add HTML escaping in email report templates to prevent XSS
- Add IP validation on token refresh to enforce IP binding
- Harden email recipient validation against header injection
- Add CSV injection prevention in report export
- Add JWT_SECRET minimum length validation (32 chars) in production
- Update bcrypt 5.x→6.x, nodemailer 6.x→8.x, fix all backend npm vulns
- Redesign UI: new theme (IBM Plex Sans, MinIO-inspired palette), improved
  login page, dashboard with skeleton loaders, refined sidebar navigation
- Add missing i18n keys for login and user menu (DE + EN)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-10 10:24:57 +01:00

53 lines
1.3 KiB
JSON

{
"name": "minio-webui-backend",
"version": "1.0.0",
"description": "MinIO WebUI Backend API",
"main": "src/app.js",
"scripts": {
"start": "node src/app.js",
"dev": "nodemon src/app.js",
"dev:node": "node --watch src/app.js",
"test": "jest --coverage",
"lint": "eslint src/",
"lint:fix": "eslint src/ --fix",
"hash-password": "node scripts/hash-password.js",
"generate-password": "node generate-password.js",
"postinstall": "npm rebuild bcrypt --build-from-source"
},
"keywords": [
"minio",
"api",
"backend"
],
"author": "",
"license": "MIT",
"dependencies": {
"bcrypt": "^6.0.0",
"compression": "^1.7.4",
"cookie-parser": "^1.4.6",
"cors": "^2.8.5",
"dotenv": "^16.3.1",
"express": "^4.18.2",
"express-rate-limit": "^7.1.5",
"express-validator": "^7.0.1",
"helmet": "^7.1.0",
"ip-range-check": "^0.2.0",
"jsonwebtoken": "^9.0.2",
"morgan": "^1.10.0",
"multer": "^1.4.5-lts.1",
"node-cron": "^3.0.3",
"nodemailer": "^8.0.2",
"winston": "^3.11.0",
"winston-daily-rotate-file": "^4.7.1"
},
"devDependencies": {
"eslint": "^8.56.0",
"jest": "^29.7.0",
"nodemon": "^3.0.2",
"supertest": "^6.3.3"
},
"engines": {
"node": ">=18.0.0"
}
}