Skip to content

security: harden bootstrap and uploads - #4

Merged
vabidev merged 5 commits into
mainfrom
security/hardening-2026-09-27
Sep 27, 2026
Merged

vabidev merged 5 commits into
mainfrom
security/hardening-2026-09-27

Conversation

@vabidev

@vabidev vabidev commented Sep 27, 2026

Copy link
Copy Markdown
Owner

Segurança

  • exige INSTALL_SECRET (32+ caracteres) para criar o primeiro administrador em produção
  • mantém /install indisponível em produção quando a chave não está configurada
  • atualiza e fixa multer em 2.4.0
  • limita quantidade/tamanho de campos e partes multipart, incluindo fieldArrayIndexLimit
  • adiciona regressões em scripts/check-security.js e documenta a nova variável

A mudança foi feita em branch isolada para validar o deploy antes de entrar em main.

@vercel

vercel Bot commented Sep 27, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
nexumpedia Ready Ready Preview Sep 27, 2026 1:14pm UTC

Copilot AI lite review requested due to automatic review settings September 27, 2026 13:14

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

@vabidev
vabidev merged commit 89a0be3 into main Sep 27, 2026
3 checks passed

This branch was successfully deployed

1 active deployment
Preview — 0f200e17 Deployed Sep 27, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants