2 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
sathish	2101ee3e4f	Merge pull request 'fix(security): resolve audit findings — debug log, payment bypass, images' (#1) from fix/security-audit into main ... Reviewed-on: #1	2026-08-04 13:18:51 +00:00
sathishandClaude Opus 5	df16a76909	fix(security): resolve audit findings — debug log, payment bypass, images ... - Remove the committed firebase-debug.log (contains a personal Google account) and gitignore it. NOTE: still present in history — a history rewrite or written confirmation is still outstanding - Remove the client-side skipPaymentCheck approval bypass - Replace the wildcard image remote host "**" with an explicit allowlist (adds DigitalOcean Spaces) Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-08-04 11:30:48 +05:30