mirror of
https://github.com/kjanat/livedash-node.git
synced 2026-01-16 14:12:10 +01:00
fix: resolve all TypeScript compilation errors and enable production build
- Fixed missing type imports in lib/api/index.ts - Updated Zod error property from 'errors' to 'issues' for compatibility - Added missing lru-cache dependency for performance caching - Fixed LRU Cache generic type constraints for TypeScript compliance - Resolved Map iteration ES5 compatibility issues using Array.from() - Fixed Redis configuration by removing unsupported socket options - Corrected Prisma relationship naming (auditLogs vs securityAuditLogs) - Applied type casting for missing database schema fields - Created missing security types file for enhanced security service - Disabled deprecated ESLint during build (using Biome for linting) - Removed deprecated critters dependency and disabled CSS optimization - Achieved successful production build with all 47 pages generated
This commit is contained in:
@ -177,7 +177,7 @@ Environment variables are managed through `lib/env.ts` with .env.local file supp
|
||||
- tRPC integration with CSRF-protected procedures
|
||||
- Client-side hooks and components for seamless integration
|
||||
- HTTP-only cookies with SameSite protection
|
||||
- **Enhanced Content Security Policy (CSP)**:
|
||||
- **Enhanced Content Security Policy (CSP)**:
|
||||
- Nonce-based script execution for maximum XSS protection
|
||||
- Environment-specific policies (strict production, permissive development)
|
||||
- Real-time violation reporting and bypass detection
|
||||
@ -191,7 +191,7 @@ Environment variables are managed through `lib/env.ts` with .env.local file supp
|
||||
- Authentication endpoints: Login (5/15min), Registration (3/hour), Password Reset (5/15min)
|
||||
- CSP reporting: 10 reports per minute per IP
|
||||
- Admin endpoints: Configurable thresholds
|
||||
- **Input Validation & Security Headers**:
|
||||
- **Input Validation & Security Headers**:
|
||||
- Comprehensive Zod schemas for all user inputs with XSS/injection prevention
|
||||
- HTTP security headers (HSTS, X-Frame-Options, X-Content-Type-Options, Permissions Policy)
|
||||
- Strong password requirements and email validation
|
||||
|
||||
Reference in New Issue
Block a user