Clintchiz e710756baf fix(authz): sanitize control characters in console audit sink ...

Prevents audit log injection: subjectId, tenantId, and reason trace back
to request input, so an unsanitized newline could forge a second,
fully-formed audit line indistinguishable from a real entry. Adds
logSafe() to strip control characters before interpolation and logs the
previously-missing policy field.

2026-08-04 17:21:09 +05:30

..

audit.test.ts

fix(authz): sanitize control characters in console audit sink

2026-08-04 17:21:09 +05:30

authz.test.ts

release: WRNexusJS 0.4.0

2026-07-27 12:42:18 +05:30

catalog.test.ts

feat(authz): merge declaration modules into a frozen catalog

2026-08-04 16:30:41 +05:30

rbac-wildcard.test.ts

fix(security): close SSRF, credential-leak, and auth bypass findings in 0.8.4

2026-08-04 15:57:22 +05:30

registry.test.ts

feat(authz): add defineAuthz declaration registry

2026-08-04 16:26:17 +05:30

store-cached.test.ts

fix(authz): eliminate cache-key collision in cachedPermissionStore

2026-08-04 17:04:19 +05:30

store-conformance.ts

fix(authz): cover grant/deny scope isolation and revoke scope-isolation in conformance suite

2026-08-04 16:43:08 +05:30

store-memory.test.ts

feat(authz): add PermissionStore contract with memory adapter and conformance suite

2026-08-04 16:36:57 +05:30