fix: close remaining Workers best-practices audit findings (#474) - #477

Merged

davidwkeith merged 42 commits into

mainfrom

claude/issue-474-3fcfa6

Jul 31, 2026

Commits on Jul 30, 2026

docs: add implementation plan for issue #474 audit fixes
davidwkeith
committed
54859e2
docs: confirm conformance-target is private in issue-474 plan
davidwkeith
committed
95d0200
fix(webauthn): cap CBOR reader recursion depth
davidwkeith
committed
4563cf8
fix(webauthn): return structured errors instead of throwing on ceremony failures
davidwkeith
committed
e7381d6
fix(webauthn): compare challenge with constant-time byte comparison
davidwkeith
committed
0c42b9c

Commits on Jul 31, 2026

fix(solid-pod): WAC-filter WebSocket broadcast per subscriber

davidwkeith
and
claude
committed
2d3f7fd
test(solid-pod): cover the WAC-grant path in the WebSocket broadcast filter

davidwkeith
and
claude
committed
69dcce7
fix(mastodon-api): return Mastodon-shaped errors instead of throwing
davidwkeith
committed
9f181b6
fix(mastodon-api): use crypto.subtle.timingSafeEqual for hex comparison

davidwkeith
and
claude
committed
a004a69
fix(micropub): background fediverse syndication via ctx.waitUntil
davidwkeith
committed
c92d715
fix(micropub): stop leaking raw D1 errors, log them instead
davidwkeith
committed
f99b76e
fix(micropub): fix eslint/prettier violations in media error test
davidwkeith
committed
100287b
fix(solid-oidc): cap token endpoint body size before validation
davidwkeith
committed
78e7b85
fix(solid-oidc): construct CodeStore once per isolate

davidwkeith
and
claude
committed
ccf1496
fix(solid-oidc): add withSession to D1 wrapper and fix formatting

davidwkeith
and
claude
committed
a9aeb74
fix(solid-oidc): log security-relevant token rejections
davidwkeith
committed
5167fc8
fix(indieauth): use crypto.subtle.timingSafeEqual for PKCE/HMAC comparison
davidwkeith
committed
c8ee6e3
fix(microsub): use crypto.randomUUID for channel uid generation

davidwkeith
and
claude
committed
b393f12
fix(activitypub): cap verification and inbox-resolution body reads
davidwkeith
committed
fbc8048
fix(vc): add runtime type guard for DID verification method entries
davidwkeith
committed
431a4e9
fix(webdav): return a well-formed 500 instead of throwing
davidwkeith
committed
95f08de
fix(remotestorage): log unexpected DO storage errors before rethrowing
davidwkeith
committed
ef800dd
fix(atproto-pds): cap migration CAR size before buffering

davidwkeith
and
claude
committed
25d627f
fix(atproto-pds): surface unhandled XRPC errors via logging
davidwkeith
committed
979f5f3
fix(conformance-target): use crypto.subtle.timingSafeEqual, avoid length leak
davidwkeith
committed
6b03204
fix(conformance-target): wrap fetch dispatch in try/catch

davidwkeith
and
claude
committed
69c0ffd
fix(examples): type env against both mounted packages

davidwkeith
and
claude
committed
72b71b5
fix(cf-shims,server): polyfill crypto.subtle.timingSafeEqual for Node

davidwkeith
and
claude
committed
0a85be0
docs(superpowers): format issue-474 audit-fixes plan with prettier

davidwkeith
and
claude
committed
63baf85
fix(solid-oidc): match repo's log-event const-object convention

davidwkeith
and
claude
committed
003083e
fix(mastodon-api): reject malformed hex before timing-safe comparison

davidwkeith
and
claude
committed
23e65ff
fix(micropub): count the fail-closed media-metadata error metric

davidwkeith
and
claude
committed
5da34f9
fix(cf-shims): support serializeAttachment/deserializeAttachment on the Node WebSocket shim

davidwkeith
and
claude
committed
90bca38
Merge remote-tracking branch 'origin/main' into claude/issue-474-3fcfa6
davidwkeith
committed
64a94a2
fix(atproto-pds): stream-cap upload/import body reads instead of buffering first

davidwkeith
and
claude
committed
8b1787f
fix(webauthn): correct off-by-one in CBOR depth-limit boundary

davidwkeith
and
claude
committed
cbe13e5
fix(atproto-pds): avoid doubling peak memory in the capped-read merge loop

davidwkeith
and
claude
committed
50b204e
fix(atproto-pds): cap the remaining unauthenticated and authenticated JSON body reads

davidwkeith
and
claude
committed
84f1225
fix(atproto-pds): pre-allocate the capped-read buffer instead of chunk-then-merge

davidwkeith
and
claude
committed
b3c19e5
fix(atproto-pds): use a resizable ArrayBuffer for the capped body read

davidwkeith
and
claude
committed
5a5c251
fix(server,conformance-target): add ES2024 ArrayBuffer lib for atproto-pds's resizable buffer

davidwkeith
and
claude
committed
842abcf
docs(solid-oidc): note the CodeStore memoization's per-isolate assumption

davidwkeith
and
claude
committed
e9bbdd5