Clintchiz e710756baf fix(authz): sanitize control characters in console audit sink ...

Prevents audit log injection: subjectId, tenantId, and reason trace back
to request input, so an unsanitized newline could forge a second,
fully-formed audit line indistinguishable from a real entry. Adds
logSafe() to strip control characters before interpolation and logs the
previously-missing policy field.

2026-08-04 17:21:09 +05:30

..

ai

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

auth

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

authz

fix(authz): sanitize control characters in console audit sink

2026-08-04 17:21:09 +05:30

benchmark

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

cache

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

captcha

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

cli

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

compiler

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

content

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

core

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

csr

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

db

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

dev-server

fix(security): close SSRF, credential-leak, and auth bypass findings in 0.8.4

2026-08-04 15:57:22 +05:30

dev-toolbar

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

encryption

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

graphql

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

helpers

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

i18n

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

identity

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

image

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

jwt

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

language-server

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

mcp

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

mobile

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

native

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

oauth

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

observability

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

playground

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

plugin

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

pubsub

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

pwa

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

queue

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

reactive

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

realtime

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

router

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

security

fix(security): close SSRF, credential-leak, and auth bypass findings in 0.8.4

2026-08-04 15:57:22 +05:30

ssr

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

store

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

styles

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

syntax

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

test

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

tracking

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

typecheck

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

ui

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30

uploader

fix(security): close SSRF, credential-leak, and auth bypass findings in 0.8.4

2026-08-04 15:57:22 +05:30

validation

release: WRNexusJS 0.8.0

2026-08-04 12:19:09 +05:30