7a0799f1d1
All checks were successful
build-and-release / build (push) Successful in 2m5s
The captcha on login and all four signup forms was generated and checked entirely in the browser (answer readable via window global), so it provided no real bot/brute-force protection. Wire up the new server-side captcha endpoint instead: fetch a challenge on mount, submit captcha_id + captcha_answer with login/register, and refresh the challenge on CAPTCHA_FAILED. Also bump patchable dependency vulnerabilities via npm audit fix (all criticals resolved; remainder needs an upstream SolidStart/vinxi bump not yet available). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
10 lines
173 B
TypeScript
10 lines
173 B
TypeScript
/// <reference types="vinxi/types/client" />
|
|
/// <reference types="vinxi/types/server" />
|
|
|
|
declare global {
|
|
interface Window {
|
|
__testMode?: boolean;
|
|
}
|
|
}
|
|
|
|
export {};
|