umputun / secrets / 20543441164

84%

push

github

fix(security): move htmx to local assets and harden crypto validation

- bundle htmx 2.0.3 and response-targets extension locally instead of
  loading from CDN, eliminating external dependency for security-focused app
- update CSP to remove unpkg.com from allowed script sources
- add input validation to crypto.js decrypt functions:
  - minimum ciphertext length checks (29/33 bytes)
  - bounds checking for file metadata parsing

1 of 1 new or added line in 1 file covered. (100.0%)

1650 of 1984 relevant lines covered (83.17%)

74.42 hits per line