2 Commits

Author	SHA1	Message	Date
Arda Samadi	485f8d460a	Security fixes: session hardening, open redirect, SSR path injection ... - sessions: require REMIX_SECRET in prod (no "secret" fallback); base Secure cookie on NODE_ENV; add maxAge - login: safeRedirect() blocks open-redirect via redirectTo (loader + action) - SSR loaders: encodeURIComponent on user path params before internal API fetch (product, store product, seller) Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-14 19:02:11 +03:30
abolfazl	0293655fc1	first	2026-04-29 01:44:16 +03:30