14 lines
1.1 KiB
JSON
14 lines
1.1 KiB
JSON
{
|
|
"feature_id": "F-064",
|
|
"agent": "security",
|
|
"verdict": "APPROVED",
|
|
"summary": "No new attack surface introduced by the admin side — the WYSIWYG runs in the existing authenticated admin context and outputs HTML through the existing body field. The public-side dangerouslySetInnerHTML was already present for the CMS pages and is gated behind the same backend-side authorization (PATCH /api/products/:id requires admin role via the existing proxy + backoffice session). No new endpoints, no new auth surface, no new env vars.",
|
|
"evidence": [
|
|
"Lexical runs only on apps/admin (admin context, requires backoffice_session)",
|
|
"Public render path now uses dangerouslySetInnerHTML on description, but write access is gated by admin auth on PATCH /api/products/:id",
|
|
"No new endpoints, no new env vars, no new dependencies",
|
|
"Lexical HTML serialization is well-defined; the editor only emits nodes from the configured set (paragraph, heading, list, link, quote)",
|
|
"Existing plain-text descriptions continue to render via dangerouslySetInnerHTML as a single text node, identical to before"
|
|
],
|
|
"timestamp": "2026-08-19T15:20:00Z"
|
|
} |