jeffemmett
/
rspace-online
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
rspace-online/modules
History
Jeff Emmett 45f5cea095 fix(security): AES-256-GCM encryption at rest, XSS escape, salted hashes 
- C-1: Replace Base64 fake encryption with real AES-256-GCM server-side
  encryption for linked wallet data (HKDF-derived key from JWT_SECRET)
- H-1: Escape token name/symbol in balance table to prevent XSS
- H-2: Salt address hash with user ID to prevent cross-user correlation
- M-4: Remove cleartext sessionStorage cache for linked wallets

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 		2026-03-09 17:42:09 -07:00
..
rbooks feat: scope system, cross-space navigation, and spaces-as-layers 2026-03-09 06:33:32 +00:00
rcal feat(rcal): add swipe/pan navigation and pinch-to-zoom gestures 2026-03-09 15:12:47 -07:00
rcart feat: wire offline-first Automerge sync to all 13 rSpace modules 2026-03-04 19:07:59 -08:00
rchoices feat: workflow template, choice components, space settings, EncryptID vault, UI polish 2026-03-03 13:15:13 -08:00
rdata feat: scope system, cross-space navigation, and spaces-as-layers 2026-03-09 06:33:32 +00:00
rdesign feat: scope system, cross-space navigation, and spaces-as-layers 2026-03-09 06:33:32 +00:00
rdocs feat: scope system, cross-space navigation, and spaces-as-layers 2026-03-09 06:33:32 +00:00
rfiles feat: wire offline-first Automerge sync to all 13 rSpace modules 2026-03-04 19:07:59 -08:00
rflows feat(rcal): add swipe/pan navigation and pinch-to-zoom gestures 2026-03-09 15:12:47 -07:00
rforum feat: wire offline-first Automerge sync to all 13 rSpace modules 2026-03-04 19:07:59 -08:00
rinbox feat: wire offline-first Automerge sync to all 13 rSpace modules 2026-03-04 19:07:59 -08:00
rmaps feat: scope system, cross-space navigation, and spaces-as-layers 2026-03-09 06:33:32 +00:00
rnetwork feat: scope system, cross-space navigation, and spaces-as-layers 2026-03-09 06:33:32 +00:00
rnotes fix(rnotes): remove premature seed from onInit (runs before loadAllDocs) 2026-03-09 15:16:19 -07:00
rphotos feat: scope system, cross-space navigation, and spaces-as-layers 2026-03-09 06:33:32 +00:00
rpubs feat: scope system, cross-space navigation, and spaces-as-layers 2026-03-09 06:33:32 +00:00
rschedule feat: scope system, cross-space navigation, and spaces-as-layers 2026-03-09 06:33:32 +00:00
rsocials feat(rcal): add swipe/pan navigation and pinch-to-zoom gestures 2026-03-09 15:12:47 -07:00
rspace fix: layer flows drag-to-connect, notification 401 spam, /api/meta 404 2026-03-04 11:12:19 -08:00
rsplat feat: scope system, cross-space navigation, and spaces-as-layers 2026-03-09 06:33:32 +00:00
rswag feat: scope system, cross-space navigation, and spaces-as-layers 2026-03-09 06:33:32 +00:00
rtrips feat: scope system, cross-space navigation, and spaces-as-layers 2026-03-09 06:33:32 +00:00
rtube feat: scope system, cross-space navigation, and spaces-as-layers 2026-03-09 06:33:32 +00:00
rvote feat: wire offline-first Automerge sync to all 13 rSpace modules 2026-03-04 19:07:59 -08:00
rwallet fix(security): AES-256-GCM encryption at rest, XSS escape, salted hashes 2026-03-09 17:42:09 -07:00
rwork feat: scope system, cross-space navigation, and spaces-as-layers 2026-03-09 06:33:32 +00:00