odysseus

jpmschweitzer/odysseus

Fork 0

mirror of https://github.com/pewdiepie-archdaemon/odysseus.git synced 2026-10-10 00:42:20 +02:00

Commit Graph

Author	SHA1	Message	Date
Alexandre Teixeira	61b63c9ce3	fix(security): isolate session cost ledger keys Use Map-backed cost ledgers so externally derived session and run identifiers never cross ordinary object prototype semantics. Preserve the existing JSON storage format and extend browser and isolated ledger regressions for replay, overflow, legacy data, and reserved keys.	2026-10-06 00:25:24 +01:00
Alexandre Teixeira	232249eb09	fix(security): harden browser security boundaries Reject unsafe metric ledger keys, keep email HTML inspection inert, and construct gallery thumbnails structurally. Add adversarial browser regressions for the remaining CodeQL security boundaries.	2026-10-05 23:48:14 +01:00

Author

SHA1

Message

Date

Alexandre Teixeira

61b63c9ce3

fix(security): isolate session cost ledger keys

Use Map-backed cost ledgers so externally derived session and run identifiers never cross ordinary object prototype semantics. Preserve the existing JSON storage format and extend browser and isolated ledger regressions for replay, overflow, legacy data, and reserved keys.

2026-10-06 00:25:24 +01:00

Alexandre Teixeira

232249eb09

fix(security): harden browser security boundaries

Reject unsafe metric ledger keys, keep email HTML inspection inert, and construct gallery thumbnails structurally. Add adversarial browser regressions for the remaining CodeQL security boundaries.

2026-10-05 23:48:14 +01:00