14 lines
660 B
JSON
14 lines
660 B
JSON
{
|
|
"feature_id": "F-060",
|
|
"agent": "security",
|
|
"verdict": "APPROVED",
|
|
"summary": "Script reads from the admin uploads dir only and writes to each app's public/uploads. Path validation unchanged. No new external calls, no secrets touched.",
|
|
"evidence": [
|
|
"SRC_DIR is hardcoded to apps/admin/public/uploads — no path from request",
|
|
"Sharp resize is local CPU work, no network",
|
|
"FORCE flag is environment-controlled, no external input",
|
|
"No write to non-public paths, no privilege escalation",
|
|
"Failure path: catch wraps main() and exits with non-zero, mirroring the previous behaviour"
|
|
],
|
|
"timestamp": "2026-08-19T14:55:00Z"
|
|
} |