Härtung (Code-Review): persistiertes Session-Secret statt Default-Fallback; timing-safe API-Token-Vergleich; Secure-Cookie auf HTTPS; HTML-Sanitizer für richtext/html-Blöcke + Seiten-Body (Stored-XSS); 14 Unit-Tests (Rabatt/MwSt/Versand/Sanitizer) + npm test

2026-06-18 07:00:31 +00:00
parent 67b2fb78b7
commit fc2ad9e678
8 changed files with 81 additions and 12 deletions
@@ -8,7 +8,8 @@
    "dev": "astro dev",
    "build": "astro build",
    "start": "node ./dist/server/entry.mjs",
-    "prebuild": "node ./scripts/sync-css.mjs"
+    "prebuild": "node ./scripts/sync-css.mjs",
+    "test": "node test/unit.mjs"
  },
  "dependencies": {
    "@astrojs/node": "^9.1.3",
@@ -19,4 +20,4 @@
    "nodemailer": "^6.10.1",
    "stripe": "^17.5.0"
  }
-}
+}