Adam Moussa f4111e4e17 Fix polynomial ReDoS in Bearer-token extraction (CodeQL js/polynomial-redos) ... extractBearerToken matched /^Bearer\s+(.+)$/ — \s and . both match a space, so the two quantifiers overlap and a crafted header can drive polynomial backtracking. Require the capture to start with a non-whitespace char (/^Bearer\s+(\S.*)$/), removing the ambiguity → linear match. Behavior is unchanged for real tokens; +2 regression tests.		2026-06-26 13:06:27 -04:00
..
calendar	Add security-weighted test suite + coverage gate; wire tooling	2026-06-26 12:48:26 -04:00
gmail	Add security-weighted test suite + coverage gate; wire tooling	2026-06-26 12:48:26 -04:00
google-maps	Add security-weighted test suite + coverage gate; wire tooling	2026-06-26 12:48:26 -04:00
internal-data	Add security-weighted test suite + coverage gate; wire tooling	2026-06-26 12:48:26 -04:00
knowledge-base	Add security-weighted test suite + coverage gate; wire tooling	2026-06-26 12:48:26 -04:00
payments	Add security-weighted test suite + coverage gate; wire tooling	2026-06-26 12:48:26 -04:00
qbo	Add security-weighted test suite + coverage gate; wire tooling	2026-06-26 12:48:26 -04:00
reminders	Add security-weighted test suite + coverage gate; wire tooling	2026-06-26 12:48:26 -04:00
shared	Fix polynomial ReDoS in Bearer-token extraction (CodeQL js/polynomial-redos)	2026-06-26 13:06:27 -04:00
tasks	Add security-weighted test suite + coverage gate; wire tooling	2026-06-26 12:48:26 -04:00
.gitkeep	Phase 0b slice: monorepo scaffold + @sh-mcp/shared core + integration packages (#2)	2026-06-26 12:42:17 -04:00