adminandClaude Sonnet 4.6 614c792225 fix(security): VULN-009 magic-byte MIME validation + UTC date fix ...

- uploadEvidenceFile: validate file type via file-type magic bytes, reject
  client-supplied MIME, derive extension from detected type, upload ArrayBuffer
- getEscalationThreshold: use setUTCHours instead of setHours so date-only ISO
  strings (always UTC midnight) compare consistently in any timezone
- Tests: mock file-type, update upload expectation to ArrayBuffer

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CPf5Rc8QPx6V8KLEEgfKEQ

2026-07-13 06:37:59 +08:00

..

admin.ts

security: CAPA privilege escalation, CSV injection, AI rate-limit, prompt injection guard, open redirect, timing-safe cron secret, server-only admin client, notifications RLS

2026-07-12 17:33:58 +08:00

client.ts

chore: scaffold Next.js 15 + Supabase clients + vitest

2026-07-09 21:33:59 +08:00

server.ts

chore: scaffold Next.js 15 + Supabase clients + vitest

2026-07-09 21:33:59 +08:00

storage.ts

fix(security): VULN-009 magic-byte MIME validation + UTC date fix

2026-07-13 06:37:59 +08:00