Address security review notes
Some checks are pending
security-baseline / secrets (push) Waiting to run
security-baseline / node (push) Waiting to run
security-baseline / semgrep (push) Waiting to run
security-baseline / trivy (push) Waiting to run

- log only the error name for rejected 4xx requests (JSON.parse messages
  can quote the request body, e.g. a password)
- refuse LB_DATABASE_PATH in production; it is test-only
- fix two stale file references in the skill texts

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Grovy311 2026-10-15 09:45:59 +02:00
parent a7a1595cbf
commit afd8019a7b
6 changed files with 15 additions and 8 deletions

View file

@ -1,4 +1,4 @@
# Herkunft
Project CodeGuard v1.5.0, https://github.com/cosai-oasis/project-codeguard
Lizenz: CC BY 4.0 (siehe LICENSE.md). Aktualisieren mit scripts/update-codeguard.ps1, nicht von Hand aendern.
Lizenz: CC BY 4.0 (siehe LICENSE.md). Aktualisieren mit scripts/update-codeguard.ps1 im Repo cj/claude-skills, nicht von Hand aendern.