Clintchiz d7509421c7 fix(authz): widen logSafe to strip NEL and Unicode line separators ...

U+0085 (NEL), U+2028 (LINE SEPARATOR), and U+2029 (PARAGRAPH SEPARATOR)
are treated as line terminators by some log shippers and by JS's own
lexical grammar (and are not escaped by JSON.stringify by default), so
they could still be used to forge audit log entries even after the
initial C0/DEL fix. logSafe now strips all five categories.

2026-08-04 17:29:46 +05:30

..

audit.test.ts

fix(authz): widen logSafe to strip NEL and Unicode line separators

2026-08-04 17:29:46 +05:30

authz.test.ts

release: WRNexusJS 0.4.0

2026-07-27 12:42:18 +05:30

catalog.test.ts

feat(authz): merge declaration modules into a frozen catalog

2026-08-04 16:30:41 +05:30

rbac-wildcard.test.ts

fix(security): close SSRF, credential-leak, and auth bypass findings in 0.8.4

2026-08-04 15:57:22 +05:30

registry.test.ts

feat(authz): add defineAuthz declaration registry

2026-08-04 16:26:17 +05:30

store-cached.test.ts

fix(authz): eliminate cache-key collision in cachedPermissionStore

2026-08-04 17:04:19 +05:30

store-conformance.ts

fix(authz): cover grant/deny scope isolation and revoke scope-isolation in conformance suite

2026-08-04 16:43:08 +05:30

store-memory.test.ts

feat(authz): add PermissionStore contract with memory adapter and conformance suite

2026-08-04 16:36:57 +05:30