Full deployment history for this project.
test: add unit tests for getCloakVisibilityMode Co-authored-by: mbarbine <3211492+mbarbine@users.noreply.github.com>
test: add unit tests for getCloakVisibilityMode Co-authored-by: mbarbine <3211492+mbarbine@users.noreply.github.com>
🔒 fix(xss): escape inline JSON-LD script payloads Prevent Cross-Site Scripting (XSS) when rendering inline JSON-LD script elements via dangerouslySetInnerHTML. Introduced serializeJsonLd in lib/utils.ts to escape HTML metacharacters (<, >, &) and unicode line separators (\u2028, \u2029) into unicode escape sequences (\u003c, etc.), preventing script tag breakout without altering parsed JSON semantics. Co-authored-by: mbarbine <3211492+mbarbine@users.noreply.github.com>
🔒 fix(xss): escape inline JSON-LD script payloads (#148)
🔒 fix(xss): escape inline JSON-LD script payloads Prevent Cross-Site Scripting (XSS) when rendering inline JSON-LD script elements via dangerouslySetInnerHTML. Introduced serializeJsonLd in lib/utils.ts to escape HTML metacharacters (<, >, &) and unicode line separators (\u2028, \u2029) into unicode escape sequences (\u003c, etc.), preventing script tag breakout without altering parsed JSON semantics. Co-authored-by: mbarbine <3211492+mbarbine@users.noreply.github.com>
🔒 Prevent Command Injection in OSINT Connector 🎯 What: Fixed command injection in OSINT connector execution. ⚠️ Risk: Potential command injection if an invalid binary parameter is supplied. 🛡️ Solution: Validate binary names against shell metacharacters and explicitly set shell: false in execFile options. Co-authored-by: mbarbine <3211492+mbarbine@users.noreply.github.com>
fix(osint): prevent command injection in OSINT connector execution (#147)
fix(osint): prevent command injection in OSINT connector execution Co-authored-by: mbarbine <3211492+mbarbine@users.noreply.github.com>
🔒 Fix insecure randomness for request ID generation Co-authored-by: mbarbine <3211492+mbarbine@users.noreply.github.com>
🧪 test: add unit tests for generateRequestId and observability helpers (#139)
🧹 remove unused NavItem import from mission shell (#141)
🔒 [security fix] replace Math.random() with crypto.randomUUID() for webhook delivery IDs (#142)
🔒 Use CSPRNG randomUUID for secure request ID generation (#143)
🔒 fix(security): add noopener to external evidence link (#144)
🧪 [testing improvement] Add unit tests for getNavGroupsForRole and navigation helpers (#146)
test: add unit tests for generateRequestId and observability helpers (#138)
🧹 remove debug console.log from oauth callback route (#136)
code health: remove debug console.log statement in OAuth callback route (#137)
⚡ Bolt: optimize evidence lookup in ExposuresTable with Map memoization (#135)
chore: reconcile and verify open PRs, build, and tests (#134)
🎨 Palette: enhance exposures table evidence drawer accessibility (#131)
palette: Improve link accessibility and keyboard focus in OSINT review components (#129)
🎨 Palette: Accessible header tabs and icon links in member experience (#132)
⚡ Bolt: optimize action packet finding lookups and draft reconciliation (#133)
⚡ Bolt: optimize getDemoKanban lane lookup with Map (#117) * ⚡ Bolt: optimize getDemoKanban lane grouping with module Map lookup * ⚡ Bolt: optimize getDemoKanban lane grouping with module Map lookup
fix: use native Vercel output tracing
chore: consolidate all open PRs into one merge (#76)
Merge pull request #9 from mbarbine/palette-operator-workbench-a11y-13641251852847812317 🎨 Palette: Operator Workbench Accessibility Improvements
test: retain traceparent safety contract
chore: remove completed Aurora migration endpoint
fix: cast migration payloads through text
fix: preserve exact Postgres migration values
feat: export Cloak operations and prepare Aurora migration
fix: remove web-vitals dependency and fix import errors - Removed WebVitalsTracker component from layout due to npm install failure - Removed telemetry endpoint and web-vitals.ts component - Fixed OAuth callback route imports (createLogContext instead of getRequestContext) - Removed unused marketing component imports from mission-surface-page - Removed DefenseLoop component usage from documentation pages - Build now succeeds without external dependency issues Co-authored-by: v0agent <it+v0agent@vercel.com>
feat: add new cron job and OpenAPI endpoint for webhook retry and specification Co-authored-by: Michael Barbine <3211492+mbarbine@users.noreply.github.com>
refactor: update import path for Next.js route types to dev version Co-authored-by: Michael Barbine <3211492+mbarbine@users.noreply.github.com>