joelbrock
0 Followers · 0 Following
  • Joined on 2026-03-06
Repositories Projects Packages Public Activity Starred Repositories
joelbrock deleted branch security/cve-review-hardening from designslife/tortugotchi 2026-10-30 17:59:31 -07:00
joelbrock pushed to main at designslife/tortugotchi 2026-10-30 17:59:30 -07:00
f486e12029 Merge pull request 'Security hardening: drop npm deps and self-host Outfit font' (#2) from security/cve-review-hardening into main
f85a6fb9b7 Security hardening: drop npm deps and self-host Outfit font
fadf1ccd50 Suspend gameplay when unfocused and fix playmate voice mismatches
Compare 3 commits »
joelbrock closed issue designslife/tortugotchi#1 2026-10-30 17:59:29 -07:00
Security review: CVE scan (incl. eMudhra CA compromise) and hardening
joelbrock merged pull request designslife/tortugotchi#2 2026-10-30 17:59:29 -07:00
Security hardening: drop npm deps and self-host Outfit font
joelbrock created pull request designslife/tortugotchi#2 2026-10-30 17:43:32 -07:00
Security hardening: drop npm deps and self-host Outfit font
joelbrock created branch security/cve-review-hardening in designslife/tortugotchi 2026-10-30 17:43:23 -07:00
joelbrock pushed to security/cve-review-hardening at designslife/tortugotchi 2026-10-30 17:43:23 -07:00
f85a6fb9b7 Security hardening: drop npm deps and self-host Outfit font
fadf1ccd50 Suspend gameplay when unfocused and fix playmate voice mismatches
Compare 2 commits »
joelbrock opened issue designslife/tortugotchi#1 2026-10-30 17:43:22 -07:00
Security review: CVE scan (incl. eMudhra CA compromise) and hardening
joelbrock opened issue designslife/WebForm-mw#4 2026-10-30 11:50:30 -07:00
Security review Oct 2026: remaining fixes and follow-ups
joelbrock opened issue designslife/WebForm-mw#3 2026-10-30 11:50:12 -07:00
Security review Oct 2026: completed fixes (Next/Node upgrade, staff tokens, upload/submit hardening)
joelbrock pushed to main at designslife/WebForm-mw 2026-10-30 11:24:30 -07:00
b5dabd9948 Merge pull request 'Security: signed staff tokens, fail-closed checksum, upload & submit hardening' (#2) from security/staff-auth-hardening into main
335cdd0c23 Refresh Next.js-generated agent rules block in AGENTS.md
526422abed Give /api/preview-link its own Bearer secret; constant-time token checks
df471e0e88 Verify client-supplied file ids on submit
0a19b57a86 Harden the extension upload endpoint (CSRF, record ACL, mime allowlist)
Compare 7 commits »
joelbrock deleted branch security/staff-auth-hardening from designslife/WebForm-mw 2026-10-30 11:24:30 -07:00
joelbrock merged pull request designslife/WebForm-mw#2 2026-10-30 11:24:28 -07:00
Security: signed staff tokens, fail-closed checksum, upload & submit hardening
joelbrock created pull request designslife/WebForm-mw#2 2026-10-30 11:23:29 -07:00
Security: signed staff tokens, fail-closed checksum, upload & submit hardening
joelbrock created branch security/staff-auth-hardening in designslife/WebForm-mw 2026-10-30 11:23:12 -07:00
joelbrock pushed to security/staff-auth-hardening at designslife/WebForm-mw 2026-10-30 11:23:12 -07:00
335cdd0c23 Refresh Next.js-generated agent rules block in AGENTS.md
526422abed Give /api/preview-link its own Bearer secret; constant-time token checks
df471e0e88 Verify client-supplied file ids on submit
0a19b57a86 Harden the extension upload endpoint (CSRF, record ACL, mime allowlist)
c9b610590e Fail closed in verifyChecksum; drop the Contact.get fallback
Compare 6 commits »
joelbrock pushed to main at designslife/WebForm-mw 2026-10-30 11:06:42 -07:00
e943158c49 Merge pull request 'Security: upgrade Next.js to 16.4.3 and pin Node 24' (#1) from security/next-16.4.3-node-24 into main
fe9bfed0d6 Upgrade Next.js to 16.4.3 and pin Node 24
Compare 2 commits »
joelbrock deleted branch security/next-16.4.3-node-24 from designslife/WebForm-mw 2026-10-30 11:06:42 -07:00
joelbrock merged pull request designslife/WebForm-mw#1 2026-10-30 11:06:40 -07:00
Security: upgrade Next.js to 16.4.3 and pin Node 24
joelbrock created pull request designslife/WebForm-mw#1 2026-10-30 11:05:54 -07:00
Security: upgrade Next.js to 16.4.3 and pin Node 24