cgalo5758
b245bdb0a9
Remediate six confirmed security issues: deployment-only config keys, bounded provider responses, short-lived registration sessions, private init file mode, FedWiki workflow authorization, and switch preview gates. - Add DeploymentOnly config key declaration; refuse runtime overrides for keys that decide where secrets are sent - Create httplimit package; bound all provider response reads at 8 MiB - Set fifteen-minute deadline on /register sessions - Write mc-config.yaml with 0600 permissions - Derive FedWiki workflow IDs from site IDs; re-authorize sites before mutating activities - Apply switch authorization gates to the proration preview
784 B
Open audit — stakes
member-console is a Go + HTMX membership console for worker cooperatives. Members sign in through an OIDC provider and buy plans through Stripe; plans provision resources (federated wiki sites, forum access, custom domains) through Temporal workflows. Sessions live in Valkey, data in PostgreSQL. One privileged role exists: operator.
The whole source is in your working directory, a disposable copy: read
anything, run anything. Scanner output is in /out/tools/ as leads. Decide
for yourself what this system must never allow and how you would attack it
from the internet, as a member, and as a member of another organisation.
Split the work however you like. Read code until you can quote it.
Report in the shape below, and say what you did not get to.