Files
oikos/.dockerignore
T
Ulas 6e0eda8ba4 fix(security): address multiple security findings from audit
- Fix SQLCipher PRAGMA key interpolation (hex-encode key to prevent crash on single quotes)
- Enforce min password length (8 chars) on admin user creation
- Add length bounds on username/display_name and login inputs
- Invalidate other sessions on password change
- Multi-stage Docker build (exclude build tools from runtime)
- Exclude docs/ from Docker image
- Consolidate dotenv.config() to single entry point
- Document flat family authorization model in SECURITY.md

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-03 09:11:17 +02:00

33 lines
316 B
Plaintext

node_modules
.git
.github
.claude
.worktrees
.env
.env.*
.nvmrc
.gitignore
.dockerignore
# Documentation (not needed at runtime)
docs/
# Tests
test-*.js
test-*.mjs
coverage/
# Scripts (dev-only)
scripts/
# Markdown files (README, CHANGELOG, etc.)
*.md
# IDE & OS
.vscode/
.idea/
.DS_Store
Thumbs.db
*.swp
*.swo