Meta Vens
7de12e84be
Relayed provider errors are printable, bounded and inert in the page ...
Self's ruling: the provider_error relay stays, because it is the protocol,
but its error and error_description are query parameters anyone can write.
Only the characters RFC 6749 4.1.2.1 allows in them survive (%x20-21,
%x23-5B, %x5D-7E), and each is cut to a bound (64 and 256). The JSON
answer, the browser page and the backend handoff all take the relayed
values.
The page has no template engine. Every value in it goes through
serializeForScript, which escapes `<`, apart from the fallback URL in the
link's href, which the URL serializer percent-encodes. A test puts
`<script>` in error_description and checks the page holds only its own
script tag.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-30 15:49:30 +02:00
Tests/docs: promote Soul's two it.fails, update the tripwire and fixtures
2026-09-08 14:23:04 +02:00
Relayed provider errors are printable, bounded and inert in the page
2026-09-30 15:49:30 +02:00
Resume browser sign-in by attempt id, not the completion code
2026-09-23 20:50:28 +02:00
Close the three one-line holes Soul left as follow-ups
2026-09-08 15:08:38 +02:00
Narrow the built-in profile lookup so the branch typechecks
2026-09-08 14:54:17 +02:00
Tests/docs: promote Soul's two it.fails, update the tripwire and fixtures
2026-09-08 14:23:04 +02:00
Make app capability rules data instead of code
2026-09-06 23:58:58 +02:00
readSecretInput: never print the path, refuse relative paths and blank secrets
2026-09-30 13:50:53 +02:00
Every start connects to Postgres; pin the signing key's read refusal
2026-09-30 15:30:10 +02:00
Move the private command port with the candidate
2026-09-06 22:15:34 +02:00
Publish runtime presence in the contract Odin admits
2026-09-07 22:19:51 +02:00
Give Heimdall Odin documents unique catalog keys
2026-08-22 03:47:02 +02:00
Assert descriptor selection instead of reading a live descriptor
2026-09-08 13:52:47 +02:00
Follow CultLib's package rename and select workspaces by path
2026-09-07 22:26:24 +02:00
Recipe test reads its secret names from the source
2026-09-30 15:30:18 +02:00
Pin the token-key length refusal custody now relies on
2026-09-30 14:03:24 +02:00
A start that does not apply the schema proves the schema is there
2026-09-30 15:49:23 +02:00
Retire the Spotiverse profile; keep the spotify provider intact for restore
2026-09-06 01:47:10 +02:00
Retire the Spotiverse profile; keep the spotify provider intact for restore
2026-09-06 01:47:10 +02:00
7de12e84be