Security Verification
" }, { "kind": "security", "source_path": "app/auth/challenge/page.tsx", "line": 39, "text": "Security Check Required
" }, { "kind": "security", "source_path": "app/auth/challenge/page.tsx", "line": 73, "text": "Your security is our priority
" }, { "kind": "security", "source_path": "app/auth/login/page.tsx", "line": 163, "text": "Your device fingerprint is automatically collected for security verification
" }, { "kind": "security", "source_path": "app/telnet/page.tsx", "line": 67, "text": "Security
" }, { "kind": "security", "source_path": "CHANGELOG.md", "line": 64, "text": "- Row Level Security policies" }, { "kind": "security", "source_path": "CHANGELOG.md", "line": 83, "text": "- Security policy" }, { "kind": "security", "source_path": "CHANGELOG.md", "line": 92, "text": "### Security" }, { "kind": "security", "source_path": "CHANGELOG.md", "line": 95, "text": "- Enabled Row Level Security" }, { "kind": "deprecated", "source_path": "CHANGELOG.md", "line": 113, "text": "- **Deprecated** for soon-to-be removed features" }, { "kind": "security", "source_path": "CHANGELOG.md", "line": 116, "text": "- **Security** for vulnerability fixes" }, { "kind": "security", "source_path": "docs/ARCHITECTURE.md", "line": 179, "text": "## Security" }, { "kind": "security", "source_path": "docs/ARCHITECTURE.md", "line": 185, "text": "3. **Database** - Row Level Security (RLS) policies" }, { "kind": "security", "source_path": "docs/QUICKSTART.md", "line": 166, "text": "- **Security**: Report privately to security@platphormnews.com" }, { "kind": "security", "source_path": "docs/ROADMAP.md", "line": 96, "text": "### Security" }, { "kind": "security", "source_path": "docs/TESTING.md", "line": 144, "text": "6. Security audit (npm audit, Snyk)" }, { "kind": "security", "source_path": "IMPLEMENTATION_REPORT.md", "line": 80, "text": "### Security" }, { "kind": "security", "source_path": "IMPLEMENTATION_REPORT.md", "line": 95, "text": "- **Challenge Flow**: Clear security messaging for unusual activity" }, { "kind": "security", "source_path": "IMPLEMENTATION_REPORT.md", "line": 146, "text": "1. Configure Supabase Row Level Security (RLS) policies" }, { "kind": "security", "source_path": "IMPLEMENTATION_SUMMARY.md", "line": 6, "text": "- ✅ Supabase integration with Row Level Security (RLS) policies" }, { "kind": "security", "source_path": "IMPLEMENTATION_SUMMARY.md", "line": 58, "text": "- ✅ SECURITY.md with security best practices" }, { "kind": "security", "source_path": "IMPLEMENTATION_SUMMARY.md", "line": 67, "text": "- ✅ GitHub Actions CI/CD pipeline with lint, type-check, tests, security" }, { "kind": "security", "source_path": "IMPLEMENTATION_SUMMARY.md", "line": 120, "text": "## 🔐 Security Features" }, { "kind": "security", "source_path": "IMPLEMENTATION_SUMMARY.md", "line": 122, "text": "- ✅ Row Level Security (RLS) on all tables" }, { "kind": "security", "source_path": "IMPLEMENTATION_SUMMARY.md", "line": 194, "text": "- **SECURITY.md** - Security practices and vulnerability reporting" }, { "kind": "security", "source_path": "IMPLEMENTATION_SUMMARY.md", "line": 210, "text": "- Review security audits (npm audit, Snyk)" }, { "kind": "security", "source_path": "IMPLEMENTATION_SUMMARY.md", "line": 226, "text": "- **Security**: security@platphormnews.com" }, { "kind": "todo", "source_path": "lib/auth/fingerprint.ts", "line": 213, "text": "// TODO: Also persist to database" }, { "kind": "todo", "source_path": "lib/auth/fingerprint.ts", "line": 230, "text": "// TODO: Also remove from database" }, { "kind": "security", "source_path": "lib/auth/fingerprint.ts", "line": 267, "text": "return { challenge: true, reason: 'Security check failed' }" }, { "kind": "security", "source_path": "lib/bbs/content.test.ts", "line": 3, "text": "import { sanitizeText, sanitizeVercelMetadata } from './security'" }, { "kind": "security", "source_path": "lib/bbs/discovery.ts", "line": 20, "text": "import { escapeXml } from './security'" }, { "kind": "security", "source_path": "lib/bbs/discovery.ts", "line": 67, "text": "'/.well-known/security.txt'," }, { "kind": "security", "source_path": "lib/bbs/discovery.ts", "line": 382, "text": "security: []," }, { "kind": "security", "source_path": "lib/bbs/discovery.ts", "line": 481, "text": "'/.well-known/security.txt'," }, { "kind": "security", "source_path": "lib/bbs/rss.ts", "line": 3, "text": "import { escapeXml } from './security'" }, { "kind": "security", "source_path": "messages/en.json", "line": 62, "text": "\"fingerprintDesc\": \"Your device fingerprint will be used for enhanced security\"," }, { "kind": "security", "source_path": "messages/en.json", "line": 163, "text": "\"security\": \"Security\"" }, { "kind": "security", "source_path": "messages/es.json", "line": 163, "text": "\"security\": \"Seguridad\"" }, { "kind": "deprecated", "source_path": "pnpm-lock.yaml", "line": 574, "text": "deprecated: Use @eslint/config-array instead" }, { "kind": "deprecated", "source_path": "pnpm-lock.yaml", "line": 582, "text": "deprecated: Use @eslint/object-schema instead" }, { "kind": "deprecated", "source_path": "pnpm-lock.yaml", "line": 2820, "text": "deprecated: This version is no longer supported. Please see https://eslint.org/version-support for other options." }, { "kind": "deprecated", "source_path": "pnpm-lock.yaml", "line": 2986, "text": "deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by cont" }, { "kind": "deprecated", "source_path": "pnpm-lock.yaml", "line": 3092, "text": "deprecated: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful." }, { "kind": "deprecated", "source_path": "pnpm-lock.yaml", "line": 3857, "text": "deprecated: Rimraf versions prior to v4 are no longer supported" }, { "kind": "deprecated", "source_path": "pnpm-lock.yaml", "line": 4307, "text": "deprecated: Use @exodus/bytes instead for a more spec-conformant and faster implementation" }, { "kind": "security", "source_path": "README.md", "line": 51, "text": "- `/.well-known/security.txt`" }, { "kind": "security", "source_path": "scripts/001_create_all_tables.sql", "line": 15, "text": "ALTER TABLE public.profiles ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/001_create_all_tables.sql", "line": 41, "text": "ALTER TABLE public.boards ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/001_create_all_tables.sql", "line": 63, "text": "ALTER TABLE public.topics ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/001_create_all_tables.sql", "line": 84, "text": "ALTER TABLE public.posts ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/001_create_all_tables.sql", "line": 106, "text": "ALTER TABLE public.chat_rooms ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/001_create_all_tables.sql", "line": 123, "text": "ALTER TABLE public.chat_messages ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/001_create_all_tables.sql", "line": 142, "text": "ALTER TABLE public.file_areas ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/001_create_all_tables.sql", "line": 161, "text": "ALTER TABLE public.files ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/001_create_all_tables.sql", "line": 184, "text": "ALTER TABLE public.games ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/001_create_all_tables.sql", "line": 200, "text": "ALTER TABLE public.announcements ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/002_full_migration.sql", "line": 34, "text": "ALTER TABLE public.profiles ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/002_full_migration.sql", "line": 72, "text": "ALTER TABLE public.boards ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/002_full_migration.sql", "line": 106, "text": "ALTER TABLE public.topics ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/002_full_migration.sql", "line": 138, "text": "ALTER TABLE public.posts ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/002_full_migration.sql", "line": 176, "text": "ALTER TABLE public.chat_rooms ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/002_full_migration.sql", "line": 205, "text": "ALTER TABLE public.chat_messages ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/002_full_migration.sql", "line": 236, "text": "ALTER TABLE public.file_areas ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/002_full_migration.sql", "line": 267, "text": "ALTER TABLE public.files ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/002_full_migration.sql", "line": 310, "text": "ALTER TABLE public.games ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/002_full_migration.sql", "line": 332, "text": "ALTER TABLE public.game_scores ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/002_full_migration.sql", "line": 367, "text": "ALTER TABLE public.announcements ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/002_full_migration.sql", "line": 400, "text": "ALTER TABLE public.user_sessions ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/002_full_migration.sql", "line": 430, "text": "ALTER TABLE public.notifications ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/002_full_migration.sql", "line": 457, "text": "ALTER TABLE public.rss_feeds ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/002_seed.sql", "line": 120, "text": "('00000000-0000-0000-0000-000000000001', 'How do I create an account?', 'Click the \"Sign Up\" button and choose a unique username. You will need to verify your device using our fingerprint system for enhanced security.', 'account', 2)," }, { "kind": "security", "source_path": "scripts/002_seed.sql", "line": 123, "text": "('00000000-0000-0000-0000-000000000001', 'Is my data secure?', 'Yes! We use device fingerprinting for authentication, encrypted connections, and follow security best practices to protect your data.', 'security', 5)" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 1, "text": "-- Platphorm BBS Row Level Security Policies" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 6, "text": "ALTER TABLE tenants ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 7, "text": "ALTER TABLE users ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 8, "text": "ALTER TABLE boards ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 9, "text": "ALTER TABLE posts ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 10, "text": "ALTER TABLE post_likes ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 11, "text": "ALTER TABLE messages ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 12, "text": "ALTER TABLE chat_rooms ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 13, "text": "ALTER TABLE chat_room_members ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 14, "text": "ALTER TABLE chat_messages ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 15, "text": "ALTER TABLE file_areas ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 16, "text": "ALTER TABLE files ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 17, "text": "ALTER TABLE games ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 18, "text": "ALTER TABLE game_scores ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 19, "text": "ALTER TABLE announcements ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 20, "text": "ALTER TABLE platphorm_services ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 21, "text": "ALTER TABLE user_sessions ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 22, "text": "ALTER TABLE user_follows ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 23, "text": "ALTER TABLE notifications ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 24, "text": "ALTER TABLE audit_logs ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 25, "text": "ALTER TABLE webhook_endpoints ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 26, "text": "ALTER TABLE webhook_deliveries ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 27, "text": "ALTER TABLE api_keys ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 28, "text": "ALTER TABLE faqs ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 29, "text": "ALTER TABLE jobs ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 30, "text": "ALTER TABLE badges ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 31, "text": "ALTER TABLE user_badges ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 32, "text": "ALTER TABLE reports ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 45, "text": "$$ LANGUAGE SQL SECURITY DEFINER;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 55, "text": "$$ LANGUAGE SQL SECURITY DEFINER;" }, { "kind": "security", "source_path": "scripts/003_rls_policies.sql", "line": 65, "text": "$$ LANGUAGE SQL SECURITY DEFINER;" }, { "kind": "security", "source_path": "scripts/004_user_trigger.sql", "line": 6, "text": "SECURITY DEFINER" }, { "kind": "security", "source_path": "scripts/004_user_trigger.sql", "line": 114, "text": "$$ LANGUAGE plpgsql SECURITY DEFINER;" }, { "kind": "security", "source_path": "scripts/006_full_setup.sql", "line": 490, "text": "ALTER TABLE tenants ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/006_full_setup.sql", "line": 491, "text": "ALTER TABLE users ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/006_full_setup.sql", "line": 492, "text": "ALTER TABLE boards ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/006_full_setup.sql", "line": 493, "text": "ALTER TABLE posts ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/006_full_setup.sql", "line": 494, "text": "ALTER TABLE post_likes ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/006_full_setup.sql", "line": 495, "text": "ALTER TABLE chat_rooms ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/006_full_setup.sql", "line": 496, "text": "ALTER TABLE chat_room_members ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/006_full_setup.sql", "line": 497, "text": "ALTER TABLE chat_messages ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/006_full_setup.sql", "line": 498, "text": "ALTER TABLE file_areas ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/006_full_setup.sql", "line": 499, "text": "ALTER TABLE files ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/006_full_setup.sql", "line": 500, "text": "ALTER TABLE games ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/006_full_setup.sql", "line": 501, "text": "ALTER TABLE game_scores ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/006_full_setup.sql", "line": 502, "text": "ALTER TABLE announcements ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/006_full_setup.sql", "line": 503, "text": "ALTER TABLE platphorm_services ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/006_full_setup.sql", "line": 504, "text": "ALTER TABLE notifications ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/006_full_setup.sql", "line": 505, "text": "ALTER TABLE audit_logs ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/006_full_setup.sql", "line": 506, "text": "ALTER TABLE api_keys ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/006_full_setup.sql", "line": 507, "text": "ALTER TABLE faqs ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/006_full_setup.sql", "line": 508, "text": "ALTER TABLE badges ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/006_full_setup.sql", "line": 509, "text": "ALTER TABLE user_badges ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/006_full_setup.sql", "line": 520, "text": "$$ LANGUAGE SQL SECURITY DEFINER;" }, { "kind": "security", "source_path": "scripts/006_full_setup.sql", "line": 529, "text": "$$ LANGUAGE SQL SECURITY DEFINER;" }, { "kind": "security", "source_path": "scripts/006_full_setup.sql", "line": 538, "text": "$$ LANGUAGE SQL SECURITY DEFINER;" }, { "kind": "security", "source_path": "scripts/006_full_setup.sql", "line": 674, "text": "SECURITY DEFINER" }, { "kind": "security", "source_path": "scripts/006_full_setup.sql", "line": 859, "text": "('00000000-0000-0000-0000-000000000001', 'Is my data secure?', 'Yes! We use encrypted connections and follow security best practices to protect your data.', 'security', 5)" }, { "kind": "security", "source_path": "scripts/010_create_tables.sql", "line": 143, "text": "-- Enable Row Level Security" }, { "kind": "security", "source_path": "scripts/010_create_tables.sql", "line": 144, "text": "ALTER TABLE public.profiles ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/010_create_tables.sql", "line": 145, "text": "ALTER TABLE public.boards ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/010_create_tables.sql", "line": 146, "text": "ALTER TABLE public.posts ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/010_create_tables.sql", "line": 147, "text": "ALTER TABLE public.replies ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/010_create_tables.sql", "line": 148, "text": "ALTER TABLE public.chat_rooms ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/010_create_tables.sql", "line": 149, "text": "ALTER TABLE public.messages ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/010_create_tables.sql", "line": 150, "text": "ALTER TABLE public.file_areas ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/010_create_tables.sql", "line": 151, "text": "ALTER TABLE public.files ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/010_create_tables.sql", "line": 152, "text": "ALTER TABLE public.games ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/010_create_tables.sql", "line": 153, "text": "ALTER TABLE public.leaderboard ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/010_create_tables.sql", "line": 154, "text": "ALTER TABLE public.announcements ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/010_create_tables.sql", "line": 155, "text": "ALTER TABLE public.presence ENABLE ROW LEVEL SECURITY;" }, { "kind": "security", "source_path": "scripts/012_seed_data.sql", "line": 40, "text": "SECURITY DEFINER" }, { "kind": "security", "source_path": "SECURITY.md", "line": 1, "text": "# Security Policy" }, { "kind": "security", "source_path": "SECURITY.md", "line": 12, "text": "We take the security of Platphorm BBS seriously. If you believe you have found a security vulnerability, please report it to us as described below." }, { "kind": "security", "source_path": "SECURITY.md", "line": 16, "text": "- Open a public GitHub issue for security vulnerabilities" }, { "kind": "security", "source_path": "SECURITY.md", "line": 22, "text": "1. **Email us** at security@platphormnews.com with details of the vulnerability" }, { "kind": "security", "source_path": "SECURITY.md", "line": 39, "text": "We offer rewards for qualifying security vulnerabilities:" }, { "kind": "security", "source_path": "SECURITY.md", "line": 48, "text": "## Security Measures" }, { "kind": "security", "source_path": "SECURITY.md", "line": 62, "text": "- Row Level Security (RLS) policies" }, { "kind": "security", "source_path": "SECURITY.md", "line": 74, "text": "### Code Security" }, { "kind": "security", "source_path": "SECURITY.md", "line": 78, "text": "- Regular security audits" }, { "kind": "security", "source_path": "SECURITY.md", "line": 81, "text": "## Security Headers" }, { "kind": "security", "source_path": "SECURITY.md", "line": 83, "text": "We implement the following security headers:" }, { "kind": "security", "source_path": "SECURITY.md", "line": 86, "text": "Strict-Transport-Security: max-age=31536000; includeSubDomains" }, { "kind": "security", "source_path": "SECURITY.md", "line": 90, "text": "Content-Security-Policy: default-src 'self'; ..." }, { "kind": "security", "source_path": "SECURITY.md", "line": 104, "text": "- Security issues: security@platphormnews.com" }, { "kind": "security", "source_path": "TESTING_GUIDE.md", "line": 148, "text": "## Security Checklist" }, { "kind": "security", "source_path": "TESTING_GUIDE.md", "line": 266, "text": "- [ ] Security audit passed" } ], "security": { "secret_risks": [], "unsafe_patterns": [ { "name": "child-process-exec", "confidence": "medium", "evidence_paths": [ "components/telnet/terminal-emulator.tsx" ] }, { "name": "dangerously-set-html", "confidence": "medium", "evidence_paths": [ "app/faq/page.tsx", "app/layout.tsx", "components/ui/chart.tsx" ] }, { "name": "sql-injection-review-needed", "confidence": "medium", "evidence_paths": [ "lib/bbs/security.ts" ] }, { "name": "ssrf-review-needed", "confidence": "medium", "evidence_paths": [ "components/bbs/services-grid.tsx", "components/boards/board-detail.tsx", "components/boards/topic-view.tsx", "components/boards/topics-list.tsx", "components/files/files-library.tsx", "lib/hooks/use-data.ts" ] } ], "sensitive_data_indicators": [ { "name": "api_key", "confidence": "medium", "evidence_paths": [ ".env.example", "app/.well-known/ai-plugin.json/route.ts", "app/.well-known/trust.json/route.ts", "app/announcements/page.tsx", "app/api/docs/route.ts", "app/api/telnet/ws/route.ts", "app/api/v1/messages/route.ts", "app/games/[id]/page.tsx", "app/privacy/page.tsx", "app/telnet/page.tsx", "app/terms/page.tsx", "components/bbs/topbar.tsx", "components/boards/board-detail.tsx", "components/boards/boards-header.tsx", "components/boards/topic-view.tsx", "components/chat/chat-room-list.tsx", "components/chat/chat-room.tsx", "components/files/files-header.tsx", "components/files/files-library.tsx", "components/sysop/sysop-dashboard.tsx" ] }, { "name": "card", "confidence": "medium", "evidence_paths": [ "app/auth/challenge/page.tsx", "app/auth/login/page.tsx", "app/auth/sign-up/page.tsx", "app/globals.css", "app/layout.tsx", "app/portal/page.tsx", "CHANGELOG.md", "components/bbs/footer.tsx", "components/bbs/index.ts", "components/bbs/quick-stats.tsx", "components/bbs/terminal-panel.tsx", "components/bbs/topbar.tsx", "components/boards/board-detail.tsx", "components/boards/boards-stats.tsx", "components/boards/topic-view.tsx", "components/chat/chat-interface.tsx", "components/files/files-library.tsx", "components/games/games-hub.tsx", "components/locale-switcher.tsx", "components/sysop/sysop-dashboard.tsx" ] }, { "name": "email", "confidence": "medium", "evidence_paths": [ "app/.well-known/ai-plugin.json/route.ts", "app/auth/sign-up/page.tsx", "app/layout.tsx", "CONTRIBUTING.md", "IMPLEMENTATION_REPORT.md", "lib/actions/auth.ts", "lib/types/database.ts", "messages/en.json", "messages/es.json", "scripts/001_core_tables.sql", "scripts/001_schema.sql", "scripts/004_user_trigger.sql", "scripts/006_full_setup.sql", "scripts/012_seed_data.sql", "SECURITY.md" ] }, { "name": "fingerprint", "confidence": "medium", "evidence_paths": [ "app/auth/login/page.tsx", "CHANGELOG.md", "components/bbs/topbar.tsx", "docs/ARCHITECTURE.md", "docs/ROADMAP.md", "docs/TESTING.md", "IMPLEMENTATION_REPORT.md", "IMPLEMENTATION_SUMMARY.md", "lib/actions/auth.ts", "lib/api/atlas.ts", "lib/auth/fingerprint.test.ts", "lib/auth/fingerprint.ts", "lib/types/database.ts", "messages/en.json", "messages/es.json", "scripts/001_core_tables.sql", "scripts/001_schema.sql", "scripts/002_full_migration.sql", "scripts/002_seed.sql", "scripts/004_user_trigger.sql" ] }, { "name": "health", "confidence": "medium", "evidence_paths": [ "app/api/cron/refresh/route.ts", "app/api/docs/route.ts", "app/api/health/route.ts", "app/api/v1/health/route.ts", "app/api/v1/services/route.ts", "app/robots.ts", "CHANGELOG.md", "components/bbs/services-grid.tsx", "docs/API.md", "docs/ARCHITECTURE.md", "IMPLEMENTATION_SUMMARY.md", "lib/api/ascii.ts", "lib/api/atlas.ts", "lib/api/services.ts", "lib/bbs/discovery.ts", "lib/bbs/mcp.ts", "lib/types/database.ts", "README.md", "scripts/001_core_tables.sql", "scripts/001_schema.sql" ] }, { "name": "ip address", "confidence": "medium", "evidence_paths": [ "lib/api/atlas.ts", "TESTING_GUIDE.md" ] }, { "name": "location", "confidence": "medium", "evidence_paths": [ "app/auth/challenge/page.tsx", "components/bbs/topbar.tsx", "components/boards/boards-header.tsx", "components/boards/topic-view.tsx", "lib/auth/fingerprint.ts", "lib/types/database.ts", "scripts/001_core_tables.sql", "scripts/001_schema.sql", "scripts/002_full_migration.sql", "scripts/006_full_setup.sql", "SECURITY.md" ] }, { "name": "password", "confidence": "medium", "evidence_paths": [ "app/auth/sign-up/page.tsx", "docs/ARCHITECTURE.md", "IMPLEMENTATION_REPORT.md", "IMPLEMENTATION_SUMMARY.md", "lib/actions/auth.ts", "lib/auth/password.ts", "lib/bbs/security.ts", "messages/en.json", "messages/es.json", "scripts/006_full_setup.sql", "SECURITY.md", "TESTING_GUIDE.md" ] }, { "name": "pii", "confidence": "medium", "evidence_paths": [ "pnpm-lock.yaml" ] }, { "name": "secret-like environment variables", "confidence": "medium", "evidence_paths": [ "package.json" ] }, { "name": "session_token", "confidence": "medium", "evidence_paths": [ "lib/types/database.ts", "scripts/001_core_tables.sql", "scripts/001_schema.sql", "scripts/002_full_migration.sql" ] }, { "name": "token", "confidence": "medium", "evidence_paths": [ ".env.example", "app/globals.css", "CONTRIBUTING.md", "docs/API.md", "docs/QUICKSTART.md", "IMPLEMENTATION_SUMMARY.md", "lib/actions/auth.ts", "lib/bbs/discovery.ts", "lib/bbs/security.ts", "lib/redis.ts", "lib/types/database.ts", "pnpm-lock.yaml", "scripts/001_core_tables.sql", "scripts/001_schema.sql", "scripts/002_full_migration.sql", "SECURITY.md", "TESTING_GUIDE.md" ] } ] }, "generated_at": "2026-05-16T16:44:13.024Z" }