Abrams Discovery Viewer

repo: ~/Projects/abrams-discovery-viewer · 6 commits · 0 in last 24h, 0 in last 7d ·

Search the build

6 commits indexed

  1. 1cab7c5 2026-08-25 creds-safe fetch guard: resolve relative fetch vs credential-free location (creds-in-URL trap)
  2. 35a33ad 2026-05-19 Block snapshot/backup files (*.bak, *.pre-*) from ever leaking case PII
  3. f810826 2026-05-13 snapshot: 1 file(s) changed, ~1 modified
  4. e9b4e3e 2026-05-07 untrack node_modules per standing rule (was tracking 645 files; files preserved on disk)
  5. 5e85b32 2026-05-07 tighten .gitignore: add missing standing-rule patterns (node_modules/ .env* tmp/ *.log .DS_Store dist/ build/ .next/)
  6. 6ac413e 2026-05-06 initial snapshot — gitify all builds (CLAUDE.md rule 2026-05-06)

Authors

Agents used

  • none detected

Skills used

  • /backup1
  • /snapshot1

Creative ideas + design notes

Commits with substantial prose (≥120 chars) — the rationale behind each move.

1cab7c5 · 2026-08-25 · creds-safe fetch guard: resolve relative fetch vs credential-free location (creds-in-URL trap) 
Fleet inoculation — opening this basic-auth app with credentials in the URL
poisoned document.baseURI and made relative fetch('/api/…') throw. Guard resolves
non-absolute request URLs against location instead. Ref: creds-in-url-fetch-guard-fleet-pattern.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
35a33ad · 2026-05-19 · Block snapshot/backup files (*.bak, *.pre-*) from ever leaking case PII 
Adds an Express 404-guard ahead of express.static so any URL matching a
backup/snapshot pattern returns 404 before either static root (public/ or
pdfs/) gets a chance to serve it. Broadens .gitignore so the same files
can't be committed by mistake either.

Defense-in-depth — no such files exist in the tree today, but this server
holds discovery PII (medical, employment, address history) and the cost
of a stray editor backup leaking via a guessable URL is unacceptable.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

File tree

11 files tracked. Click any to browse the source at HEAD.

Other build journals

← A2a Lab  ·  all 4 projects  ·  Abrams Life →

Export

commits.csv · feed.atom · project.json · commits.json

rendered in 1ms