Aditya Gupta a27bd118e5 fix: Cross-User Write, strict CORS, rate limiting ...

- IDOR in sync api
- if server was run in prod without jwt secret var then it fell back to inscure string; added startup check
- restrict query requests to vite origin
- use `express-rate-limit`. 100 requests per 15-minute window for a client

2026-06-06 22:14:53 +05:30

..

db.js

pwa ops

2026-06-06 09:49:43 +05:30

index.js

fix: Cross-User Write, strict CORS, rate limiting

2026-06-06 22:14:53 +05:30

package-lock.json

fix: Cross-User Write, strict CORS, rate limiting

2026-06-06 22:14:53 +05:30

package.json

fix: Cross-User Write, strict CORS, rate limiting

2026-06-06 22:14:53 +05:30