Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
apache/answer
main @ 2746bf5
49
Fixes
18
CVEs
CRITICAL
Peak severity
38.5%
Coverage
Highlights
Auth Bypass: 23 prior fixes. Scrutinize any change in this area.
internal/service/uploader/upload.go: most-fixed (7 issues). Treat as high-risk during review.
24 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: The application's core authentication middleware historically contained a hardcoded development backdoor token ('888') that allowed complete authorization bypass. Additionally, the middleware required structural fixes to properly handle API key scopes, synchronize admin user cache updates, and restrict unauthorized routes during private mode configurations.
Stored XSS: Improper neutralization and sanitization of user-supplied input during markdown rendering allowed attackers to inject persistent malicious scripts. Mitigating this risk required enforcing robust output sanitization using bluemonday on the backend, complemented by DOMPurify in the frontend's markdown viewer components.
Path Traversal: A directory traversal vulnerability in the file download router allowed unauthorized access to local filesystem paths outside designated media directories. Fixing this required strict mapping of static subpath routers and path prefix validation.