odysseus

jpmschweitzer/odysseus

Fork 0

mirror of https://github.com/pewdiepie-archdaemon/odysseus.git synced 2026-10-08 07:52:20 +02:00

Commit Graph

Author	SHA1	Message	Date
Alexandre Teixeira	39b8563213	fix(security): isolate session cost ledger keys Use Map-backed cost ledgers so externally derived session and run identifiers never cross ordinary object prototype semantics. Preserve the existing JSON storage format and extend browser and isolated ledger regressions for replay, overflow, legacy data, and reserved keys.	2026-10-06 00:25:24 +01:00
CI Test	56e06de545	fix(security): harden browser security boundaries Reject unsafe metric ledger keys, keep email HTML inspection inert, and construct gallery thumbnails structurally. Add adversarial browser regressions for the remaining CodeQL security boundaries.	2026-10-05 23:48:14 +01:00

Author

SHA1

Message

Date

Alexandre Teixeira

39b8563213

fix(security): isolate session cost ledger keys

Use Map-backed cost ledgers so externally derived session and run identifiers never cross ordinary object prototype semantics. Preserve the existing JSON storage format and extend browser and isolated ledger regressions for replay, overflow, legacy data, and reserved keys.

2026-10-06 00:25:24 +01:00

CI Test

56e06de545

fix(security): harden browser security boundaries

Reject unsafe metric ledger keys, keep email HTML inspection inert, and construct gallery thumbnails structurally. Add adversarial browser regressions for the remaining CodeQL security boundaries.

2026-10-05 23:48:14 +01:00