 Paul NothaftandPaul Nothaft
|
2462ba6897
|
fix(security): close authorization/ownership gaps (token scope, mass-assignment, category hero, project docs) (stable) (#944)
* fix(security): close authorization/ownership gaps (token scope, mass-assignment, category hero, project docs)
* fix(security): block archive columns in event mass-assignment per review
* fix(security): comprehensive event mass-assignment denylist + deal-cascade cross-domain permission gate (codex r2)
* fix(security): case-insensitive complete event denylist + project_id + empty-update no-op (codex r3)
---------
Co-authored-by: Paul Nothaft <[email protected]>
|
2026-08-01 17:36:57 +02:00 |
|