decentraland / comms-gatekeeper / 28883399890

Builds Branch Commit Type Ran Committer Via Coverage
28883399890 2.28.0 fix: address security audit findings (access control, disclosure, hardening) (#276) * fix: address security audit findings across access control and hardening Resolves the findings from a full-codebase security review. Access control (HIGH): - ... push web-flow github
85.37
28790179664 dependabot/npm_and_yarn/dcl/features-component-1.0.2 chore: bump @dcl/features-component from 1.0.1 to 1.0.2 Bumps [@dcl/features-component](https://github.com/decentraland/core-components/tree/HEAD/components/features) from 1.0.1 to 1.0.2. - [Release notes](https://github.com/decentraland/core-com... Pull #281 web-flow github
85.37
28790163745 dependabot/npm_and_yarn/dcl/http-server-2.2.1 chore: bump @dcl/http-server from 2.1.0 to 2.2.1 Bumps [@dcl/http-server](https://github.com/decentraland/core-components/tree/HEAD/components/http-server) from 2.1.0 to 2.2.1. - [Release notes](https://github.com/decentraland/core-components/rel... Pull #279 web-flow github
85.37
28790155403 dependabot/npm_and_yarn/dcl/analytics-component-1.0.5 chore: bump @dcl/analytics-component from 1.0.3 to 1.0.5 Bumps [@dcl/analytics-component](https://github.com/decentraland/core-components/tree/HEAD/components/analytics) from 1.0.3 to 1.0.5. - [Release notes](https://github.com/decentraland/core-... Pull #278 web-flow github
85.41
28790172226 dependabot/npm_and_yarn/dcl/crypto-3.7.0 chore: bump @dcl/crypto from 3.4.5 to 3.7.0 Bumps [@dcl/crypto](https://github.com/decentraland/decentraland-crypto) from 3.4.5 to 3.7.0. - [Release notes](https://github.com/decentraland/decentraland-crypto/releases) - [Commits](https://github.c... Pull #280 web-flow github
85.37
28790144297 dependabot/npm_and_yarn/dcl/crypto-middleware-5.0.0 chore: bump @dcl/crypto-middleware from 4.1.0 to 5.0.0 Bumps [@dcl/crypto-middleware](https://github.com/decentraland/core-libs/tree/HEAD/libs/crypto-middleware) from 4.1.0 to 5.0.0. - [Release notes](https://github.com/decentraland/core-libs/rel... Pull #277 web-flow github
85.37
28616085146 main fix: address security audit findings (access control, disclosure, hardening) (#276) * fix: address security audit findings across access control and hardening Resolves the findings from a full-codebase security review. Access control (HIGH): - ... push web-flow github
85.37
28613949985 fix/security-audit-findings refactor: move sceneId->place resolution into the places component - Add places.getPlaceBySceneId(sceneId, worldName?) and delete the standalone logic/scene-place helper. The places component gains the contentClient dependency (created before... Pull #276 LautaroPetaccio github
85.37
28599876051 fix/security-audit-findings refactor: validate remove-scene-admin body via schema; tighten watcher auth - remove-scene-admin: add RemoveSceneAdminRequestSchema and validate it on the route, dropping the manual request.json() try/catch + guard + EthAddress check from the... Pull #276 LautaroPetaccio github
85.53
28597490824 fix/security-audit-findings fix: align empty-ingress + body-parse handling; parameterize test query Addresses review comments: - streaming-key-ttl-checker: skip removeIngress('') for empty-ingress Cast 2.0 rows so removeAccess still runs (mirrors streaming-ttl-checker); o... Pull #276 LautaroPetaccio github
85.44
28595842955 fix/security-audit-findings refactor: revert ban-status disclosure trim; address review comments - Revert the /users/:address/bans response trim — exposing the full ban record is acceptable per product, so the unauthenticated endpoint returns the full ban again (the adv... Pull #276 LautaroPetaccio github
85.48
28594276409 fix/security-audit-findings fix: address security audit findings across access control and hardening Resolves the findings from a full-codebase security review. Access control (HIGH): - Bind LiveKit streaming-key issuance and scene-ban checks to the sceneId that forms th... Pull #276 LautaroPetaccio github
85.32
28373235419 main fix: preserve stored IP/device on null upsert of player connection info (#275) * fix: preserve stored IP/device on null upsert of player connection info The player_connection_info upsert overwrote ip_address and device_id unconditionally on conf... push web-flow github
85.35
28372971369 fix/preserve-player-connection-info-on-null-upsert docs: correct upsertPlayerConnection JSDoc for preserve-on-null behavior The interface doc said subsequent calls overwrite the IP and device id, which is no longer accurate after switching to COALESCE. Describe that a null incoming value preserve... Pull #275 LautaroPetaccio github
85.35
28372014013 fix/preserve-player-connection-info-on-null-upsert fix: preserve stored IP/device on null upsert of player connection info The player_connection_info upsert overwrote ip_address and device_id unconditionally on conflict, so any token request arriving without an IP/device (e.g. a path that omits t... Pull #275 LautaroPetaccio github
85.35