Re-Quest/frontend
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(security): resolve audit findings — logging, endpoints, contact details #3

Merged
sathish merged 1 commits from fix/security-audit into main 2026-08-04 13:18:56 +00:00
Conversation 0 Commits 1 Files Changed 10 +27 -31

1 Commits

Author SHA1 Message Date
Sathish
fc932dbc7e fix(security): resolve audit findings — logging, endpoints, contact details 
- Stop logging submitted password forms to the browser console
- Drive analytics from NEXT_PUBLIC_UMAMI_* instead of a hardcoded vendor
  script URL and site ID; renders nothing when unset
- Replace the wildcard image remote host "**" with an explicit allowlist
  (adds DigitalOcean Spaces)
- Fix the socket URL fallback to the API port (:3001, was :4000)
- Replace placeholder and personal contact emails with support@re-quest.com,
  including the privacy policy and terms pages

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
 2026-08-04 11:30:46 +05:30