cgalo5758
b245bdb0a9
Remediate six confirmed security issues: deployment-only config keys, bounded provider responses, short-lived registration sessions, private init file mode, FedWiki workflow authorization, and switch preview gates. - Add DeploymentOnly config key declaration; refuse runtime overrides for keys that decide where secrets are sent - Create httplimit package; bound all provider response reads at 8 MiB - Set fifteen-minute deadline on /register sessions - Write mc-config.yaml with 0600 permissions - Derive FedWiki workflow IDs from site IDs; re-authorize sites before mutating activities - Apply switch authorization gates to the proration preview
16 lines
784 B
Markdown
16 lines
784 B
Markdown
# Open audit — stakes
|
|
|
|
member-console is a Go + HTMX membership console for worker cooperatives.
|
|
Members sign in through an OIDC provider and buy plans through Stripe; plans
|
|
provision resources (federated wiki sites, forum access, custom domains)
|
|
through Temporal workflows. Sessions live in Valkey, data in PostgreSQL.
|
|
One privileged role exists: operator.
|
|
|
|
The whole source is in your working directory, a disposable copy: read
|
|
anything, run anything. Scanner output is in `/out/tools/` as leads. Decide
|
|
for yourself what this system must never allow and how you would attack it
|
|
from the internet, as a member, and as a member of another organisation.
|
|
Split the work however you like. Read code until you can quote it.
|
|
|
|
Report in the shape below, and say what you did not get to.
|