Henrique Dias ec13054671 fix(share): stop exposing password hash and bypass token in share API (GHSA-833g-cqhp-h72j) ... The share management endpoints serialized the storage struct directly, returning the bcrypt password_hash (crackable offline) and the bypass token for every share an authenticated caller could list, with admins seeing them for all users. Return a response DTO that exposes only whether a share is password-protected (hasPassword) and drops both secrets. The storage struct keeps its tags so the secrets stay persisted and the server-side auth/public flows are unchanged. Updates the frontend to use hasPassword and adds a regression test.		2026-06-27 09:08:56 +02:00
..
dist
public
src	fix(share): stop exposing password hash and bypass token in share API (GHSA-833g-cqhp-h72j)	2026-06-27 09:08:56 +02:00
test-results
.prettierignore
.prettierrc.json
assets.go
env.d.ts
eslint.config.js
index.html
package.json	chore(deps): update all non-major dependencies (#5929)	2026-05-17 14:59:19 +02:00
pnpm-lock.yaml	chore(deps): update all non-major dependencies (#5929)	2026-05-17 14:59:19 +02:00
postcss.config.cjs
tsconfig.app.json
tsconfig.json
tsconfig.node.json
vite.config.ts	fix(frontend): do not delete original assets	2026-03-06 16:07:08 +01:00