Re-Quest/adminpanel
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(security): resolve audit findings — debug log, payment bypass, images #1

Merged
sathish merged 1 commits from fix/security-audit into main 2026-08-04 13:18:52 +00:00
Conversation 0 Commits 1 Files Changed 3 +5 -58

1 Commits

Author SHA1 Message Date
Sathish
df16a76909 fix(security): resolve audit findings — debug log, payment bypass, images 
- Remove the committed firebase-debug.log (contains a personal Google
  account) and gitignore it. NOTE: still present in history — a history
  rewrite or written confirmation is still outstanding
- Remove the client-side skipPaymentCheck approval bypass
- Replace the wildcard image remote host "**" with an explicit allowlist
  (adds DigitalOcean Spaces)

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
 2026-08-04 11:30:48 +05:30