Sotoontech/Vitron-Front
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
security-fixes
Vitron-Front/app
History
Arda Samadi 485f8d460a Security fixes: session hardening, open redirect, SSR path injection 
- sessions: require REMIX_SECRET in prod (no "secret" fallback); base Secure
  cookie on NODE_ENV; add maxAge
- login: safeRedirect() blocks open-redirect via redirectTo (loader + action)
- SSR loaders: encodeURIComponent on user path params before internal API
  fetch (product, store product, seller)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-14 19:02:11 +03:30
..
assets first 2026-04-29 01:44:16 +03:30
components first 2026-04-29 01:44:16 +03:30
data first 2026-04-29 01:44:16 +03:30
hooks first 2026-04-29 01:44:16 +03:30
lib first 2026-04-29 01:44:16 +03:30
requestHandler first 2026-04-29 01:44:16 +03:30
routes Security fixes: session hardening, open redirect, SSR path injection 2026-06-14 19:02:11 +03:30
styles first 2026-04-29 01:44:16 +03:30
types first 2026-04-29 01:44:16 +03:30
utils first 2026-04-29 01:44:16 +03:30
auth.server.ts first 2026-04-29 01:44:16 +03:30
cookie.ts first 2026-04-29 01:44:16 +03:30
entry.client.tsx first 2026-04-29 01:44:16 +03:30
entry.server.tsx first 2026-04-29 01:44:16 +03:30
i18n.ts first 2026-04-29 01:44:16 +03:30
root.tsx first 2026-04-29 01:44:16 +03:30
sessions.server.ts Security fixes: session hardening, open redirect, SSR path injection 2026-06-14 19:02:11 +03:30
tailwind.css first 2026-04-29 01:44:16 +03:30