Skip to content

Conversation

@cmyers-mieweb
Copy link
Collaborator

@cmyers-mieweb cmyers-mieweb commented Sep 17, 2025

Replaced vulnerable 'exec' with 'spawn' for user authentication to improve security. Session secret is now loaded from environment variables, and the app is configured to trust proxy and use secure cookies. Middleware setup and server initialization were refactored for better structure.

Fixes issue: #28

Carter Myers added 2 commits September 17, 2025 15:13
Replaced vulnerable 'exec' with 'spawn' for user authentication to improve security. Session secret is now loaded from environment variables, and the app is configured to trust proxy and use secure cookies. Middleware setup and server initialization were refactored for better structure.
@runleveldev
Copy link
Collaborator

These changes seem to have been superceded by #48 @cmyers-mieweb can you confirm and close if so?

@cmyers-mieweb cmyers-mieweb deleted the cmyers_enhance branch October 20, 2025 20:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants