RagavRida 3bba467289 fix(verify-rls): drop predictable $$-based tmp file fallback ...

Same shape as gstack-telemetry-sync: on mktemp failure the script fell
back to '/tmp/verify-rls-$$-$TOTAL', which is fully predictable from the
PID and a per-check counter. On a shared box another user can pre-create
or symlink the path and either capture the HTTP response body (which may
leak what the RLS tests revealed) or corrupt an unrelated file that curl
writes through.

Make mktemp strict. On failure return from the check function; the caller
tallies a FAIL and the run moves on.

2026-05-17 19:52:15 -07:00

..

functions

feat(security): ML prompt injection defense for sidebar (v1.4.0.0) (#1089)

2026-04-20 22:18:37 +08:00

migrations

feat(security): ML prompt injection defense for sidebar (v1.4.0.0) (#1089)

2026-04-20 22:18:37 +08:00

config.sh

fix: Supabase telemetry security lockdown (v0.11.16.0) (#460)

2026-03-24 15:01:31 -07:00

verify-rls.sh

fix(verify-rls): drop predictable $$-based tmp file fallback

2026-05-17 19:52:15 -07:00