fix(security): harden encryption key permissions, increase password minimum, remove sensitive logs (#323)

Browse Source

Self-heal encryption key file permissions to 0600 on startup. Increase
minimum password length from 6 to 8 characters per NIST SP 800-63B.
Remove console.log statements that exposed file paths, .env locations,
stack names, and admin usernames to stdout.

...

This commit is contained in:

Anso

2026-04-01 21:27:37 -04:00

committed by GitHub

parent 1c221508a2

commit f317a83814

11 changed files with 67 additions and 31 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

docs/images/rbac/user-create-form.png

BIN

Binary file not shown.

Side by Side After Width:  |  Height:  |  Size: 48 KiB