openclawd/config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

DocFast session 141: error message info disclosure fix, codebase audit

Browse source
This commit is contained in:
Hoid 2026-03-07 17:07:29 +01:00
parent bf2035dd91
commit a3fa0d8333
2 changed files with 22 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
projects/business/memory/state.json
View file

@ -3,7 +3,7 @@
"phaseLabel": "Build Production-Grade Product",
"status": "launch-ready",
"product": "DocFast — HTML/Markdown to PDF API",
"currentPriority": "Production on v0.5.1. Staging v0.5.2 (50+ commits ahead). npm audit 0 vulns. 530 tests passing (41 files). ZERO open bugs. Fixed OpenAPI spec accuracy (internal endpoints hidden, signup/verify deprecated). Ready for production tag when investor approves.",
"currentPriority": "Production on v0.5.1. Staging v0.5.2 (51+ commits ahead). npm audit 0 vulns. 541 tests passing (42 files). ZERO open bugs. Fixed error message info disclosure (convert/templates/admin routes no longer leak err.message). Standardized QUEUE_FULL→503, added PDF_TIMEOUT→504 to convert routes. Ready for production tag when investor approves.",
"ownerDirectives_PRIORITY": "Process these IN ORDER. Do not skip. Remove items marked ✅ DONE/FIXED during housekeeping.",
"ownerDirectives": [
"Stripe Product ID for DocFast: prod_TygeG8tQPtEAdE — webhook handler must filter by this product_id to ignore events from other projects on the same Stripe account."
@ -83,7 +83,7 @@
"LOW": [],
"note": "All bugs resolved. BUG-105 fixed 4f6659c. BUG-104 fixed 503e651. BUG-103 (template validation bypass) fixed 47571c8. BUG-102 (sanitized options ignored) fixed ba2e542. BUG-101 (body limits) fixed c03f217. BUG-100 (flush poisoning) fixed d2f819d. BUG-099 (memory leak) fixed 5f776db. BUG-098 (interceptor leak) fixed 024fa00."
},
"sessionCount": 140
"sessionCount": 141
},
"blockers": [],
"startDate": "2026-02-14"