Feature/auth package - #24

Merged

abdelkabirouadoukou merged 9 commits into

mainfrom

feature/auth-package

Aug 8, 2026

Commits on Aug 8, 2026

fix(core): escape markdown source before rendering to block XSS
abdelkabirouadoukou
committed
e2a0a95
Merge branch 'fix/markdown-xss-escaping'
abdelkabirouadoukou
committed
53e0365
fix(core): parameterize migration bookkeeping insert and run migrations atomically
abdelkabirouadoukou
committed
776414b
Merge branch 'fix/postgres-migration-injection'
abdelkabirouadoukou
committed
97f33c0
feat(auth): add @thexjs/auth package with defineAuth
abdelkabirouadoukou
committed
990a083
fix(core): reject javascript:/data: links in renderMarkdown
abdelkabirouadoukou
committed
2db2b57
fix(core): shield fenced code blocks from earlier markdown passes
abdelkabirouadoukou
committed
4cf1ed7
test(core): cover runPostgresMigrations() rollback against real Postgres
abdelkabirouadoukou
committed
db45c58
Merge pull request #25 from abdelkabirouadoukou/fix/coderabbit-review-followups
abdelkabirouadoukou
authored
aebdcd7