DocFast session 139: CORS security fix on /v1/email-change
This commit is contained in:
parent
39d22c3cff
commit
0f5953c58c
2 changed files with 22 additions and 2 deletions
|
|
@ -3,7 +3,7 @@
|
|||
"phaseLabel": "Build Production-Grade Product",
|
||||
"status": "launch-ready",
|
||||
"product": "DocFast — HTML/Markdown to PDF API",
|
||||
"currentPriority": "Production on v0.5.1. Staging v0.5.2 (48+ commits ahead). npm audit 0 vulns. 527 tests passing (40 files). ZERO open bugs. Added GET /v1/usage/me for user-facing usage stats. Fixed shutdown usage flush race condition. Ready for production tag when investor approves.",
|
||||
"currentPriority": "Production on v0.5.1. Staging v0.5.2 (49+ commits ahead). npm audit 0 vulns. 527 tests passing (40 files). ZERO open bugs. Fixed CORS security gap on /v1/email-change. Ready for production tag when investor approves.",
|
||||
"ownerDirectives_PRIORITY": "Process these IN ORDER. Do not skip. Remove items marked ✅ DONE/FIXED during housekeeping.",
|
||||
"ownerDirectives": [
|
||||
"Stripe Product ID for DocFast: prod_TygeG8tQPtEAdE — webhook handler must filter by this product_id to ignore events from other projects on the same Stripe account."
|
||||
|
|
@ -83,7 +83,7 @@
|
|||
"LOW": [],
|
||||
"note": "All bugs resolved. BUG-105 fixed 4f6659c. BUG-104 fixed 503e651. BUG-103 (template validation bypass) fixed 47571c8. BUG-102 (sanitized options ignored) fixed ba2e542. BUG-101 (body limits) fixed c03f217. BUG-100 (flush poisoning) fixed d2f819d. BUG-099 (memory leak) fixed 5f776db. BUG-098 (interceptor leak) fixed 024fa00."
|
||||
},
|
||||
"sessionCount": 138
|
||||
"sessionCount": 139
|
||||
},
|
||||
"blockers": [],
|
||||
"startDate": "2026-02-14"
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue