Profa 43a1d7e5f0 fix(security): resolve all 9 GitHub code scanning alerts ...

HIGH severity:
- #158: Fix DOM XSS in sorter.js — replace innerHTML with createElement/appendChild
- #151: Fix weak password hash in test fixture — SHA-512 → scryptSync
- #152,#153: Fix incomplete URL sanitization in OAuth test — .includes() → exact match
- #154: Fix incomplete hostname regexp — escape regex special chars in expectMemoryStored

MEDIUM severity:
- #155,#156,#157: Fix prototype pollution flags — replace Object.defineProperty with
  direct assignment on validated, null-prototype objects (guards already existed)
- #150: Delete obsolete publish-v3-alpha.yml workflow (dead since v3.7.5 flatten)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-02 08:13:01 +00:00

..

oauth-security.test.ts

fix(security): resolve all 9 GitHub code scanning alerts

2026-03-02 08:13:01 +00:00