GeoFlow XSS and arbitrary file deletion vulnerability fix summary

Vulnerability Fix Summary Vulnerability Overview PR Title: fix: address security vulnerabilities reported in #60 #61 Status: Merged. On July 17, merged 8 commits from the branch into . Related Issues: Security vulnerabilities reported in #60 and #61. Scope of Impact XSS Risk: JSON-LD rendering lacked hardening for script context. Resource Management: Creation/deletion of managed images was not constrained to a managed root directory equipped with persistent identifiers, a registry, and locking. Static Themes: Executable paths for generated Blade previews and publishing were located within isolated static theme artifacts. Permission Control: Protected workflows were restricted to super administrators via the SSSP sidecar gateway. Upgrade/Audit: Included upgrade prefixes, read-only audits, release metadata, dependency updates, and subsequent hardening measures. Fix Implementation Hardened JSON-LD rendering to mitigate script context XSS. Constrained creation and deletion of managed images to a managed root directory with persistent identifiers, a registry, and locking, and added readiness checks. Removed executable paths for generated Blade previews and publishing, placing them within isolated static theme artifacts. Restricted protected workflows to super administrators via the SSSP sidecar gateway. Added security upgrade prefixes, read-only audits, release metadata, dependency updates, and subsequent hardening measures. Review Follow-ups Re-validate archive repository paths on each redirect; reject ambiguous archive paths. Protect theme drafts, packages, and queues; add symlinks and lock storage for archive concurrency attacks. Prevent workflow data leakage on routine admin pages originating from query parameters or redirects. Reconcile legacy image registry logs with consistent hashes upon readiness. Restrict reading of deployment diagnostic logs to prevent memory exhaustion. Upgrade Instructions Existing deployments should execute the following: 1. Enter maintenance mode and stop or drain web, queue, scheduler, and Reverb processes. 2. Run migrations and set . 3. Remove the one-time confirmation and start new application processes. 4. Run , requiring that the counts of remaining, terminal, and registry failures are zero. 5. Run and resolve all findings. 6. Enable only after readiness and audit checks pass. See for full instructions. Verification : 940 tests, 7,642 assertions. : No issues with check-publish. : No advisories. : 0 vulnerabilities. . . Fresh SQL migration order confirmed with scoped installation. Commit History (8 commits) 1. 2. 3. 4. 5. 6. 7. 8. Related Closed #60. The successful merge of this PR likely also closed the related issues. Labels: .

Goal Reached Thanks to every supporter — we hit 100%!

GeoFlow XSS and arbitrary file deletion vulnerability fix summary

More from this source