Skip to content

security (login/2fa throttling, admin-redirect lockdown), fix (slug/url/category data integrity, locale cookie, email escaping, art code validation), perf (batched product hooks), build (node 24 pin, e2e ci job) - #52

Merged
brullee merged 22 commits into
mainfrom
dev
Sep 12, 2026
Merged

security (login/2fa throttling, admin-redirect lockdown), fix (slug/url/category data integrity, locale cookie, email escaping, art code validation), perf (batched product hooks), build (node 24 pin, e2e ci job)#52
brullee merged 22 commits into
mainfrom
dev

Conversation

@brullee

@brullee brullee commented Sep 12, 2026

Copy link
Copy Markdown
Owner

No description provided.

@brullee
build: pin node to 24 lts
df10b2a
@brullee
fix: block anything but digits in the art code field
616713e
@brullee
fix: share one payload pool per process
3cfeb3f
@brullee
security: throttle password guessing and lock down 2fa code guessing
bd8dbbb
@brullee
security: restrict admin-redirect to a fixed collection
756dd90
@brullee
fix: 2fa setup modal can lose recovery codes and race on auto submit
1f661be
@brullee
fix: encode r2 media filenames so special characters do not break urls
d409697
@brullee
fix: use sharps own hasAlpha field instead of guessing from channel c…
4391fb6 
…ount
@brullee
fix: stop skipping normalization of a real file replacement
a0ac866
@brullee
fix: trim color size and unit names so whitespace does not create dup…
f337d6b 
…licates
@brullee
fix: block deleting a category that products still use
3891ed5
@brullee
fix: trim category slug and product slug prefix
9e298ad
@brullee
perf: batch size and lid lookups in product save hooks
27d0818
@brullee
fix: correct and share the lid category slug list
800577e
@brullee
fix: retry payload init after a failed cold start instead of caching …
e41b2ad 
…the failure
@brullee
fix: lowercase product slug before lookup so casing does not 404
1a910c1
@brullee
fix: language toggle cookie was overwritten with a session only cookie
0971b34
@brullee
fix: escape all user submitted fields in email templates
9050fc0
@brullee
fix: arabic zero count used the wrong grammatical noun form
797b97c
@brullee
fix: copy url button showed success even when the clipboard write failed
d18c053
@brullee
1.1.9
fbd72eb
@vercel

vercel Bot commented Sep 12, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
yasmine-plastics Ready Ready Preview Sep 12, 2026 9:42pm UTC

@brullee
brullee merged commit fdec638 into main Sep 12, 2026
3 of 4 checks passed

This branch was successfully deployed

1 active deployment
Preview — c5cecd3c Deployed Sep 12, 2026 by vercel[bot]
View deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@brullee