teernisse eb8001dbf1 Harden session discovery with path validation and parallel I/O ...

Security: Reject session paths containing '..' traversal segments or
non-.jsonl extensions before resolving them. This prevents a malicious
sessions-index.json from tricking the viewer into reading arbitrary files.

Performance: Process all project directories concurrently with Promise.all
instead of sequentially awaiting each one. Each directory's stat + readFile
is independent I/O that benefits from parallelism.

Add test case verifying that traversal paths and non-JSONL paths are rejected
while valid paths pass through.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-30 01:08:57 -05:00

bin

Add project scaffolding and build configuration

2026-01-29 22:55:31 -05:00

src

Harden session discovery with path validation and parallel I/O

2026-01-30 01:08:57 -05:00

tests

Harden session discovery with path validation and parallel I/O

2026-01-30 01:08:57 -05:00

eslint.config.js

Add project scaffolding and build configuration

2026-01-29 22:55:31 -05:00

package-lock.json

Add package-lock.json for reproducible installs

2026-01-29 22:57:09 -05:00

package.json

Add project scaffolding and build configuration

2026-01-29 22:55:31 -05:00

playwright.config.ts

Add project scaffolding and build configuration

2026-01-29 22:55:31 -05:00

postcss.config.js

Add project scaffolding and build configuration

2026-01-29 22:55:31 -05:00

tailwind.config.js

Add project scaffolding and build configuration

2026-01-29 22:55:31 -05:00

tsconfig.json

Add project scaffolding and build configuration

2026-01-29 22:55:31 -05:00

tsconfig.server.json

Add project scaffolding and build configuration

2026-01-29 22:55:31 -05:00

vite.config.ts

Remove hardcoded Tailscale IP, bind server and Vite to localhost only

2026-01-30 01:08:46 -05:00

vitest.config.ts

Add project scaffolding and build configuration

2026-01-29 22:55:31 -05:00

Description

No description provided

499 KiB

Languages

TypeScript 84.7%

HTML 8.8%

CSS 5%

JavaScript 1.5%