Dmitry Gusev 2a539705e7 fix(security): npm audit fix + GitLeaks allowlist for indexnow.js ...

- npm audit fix: устранены 5 vulnerabilities (где возможно без --force):
  - path-to-regexp <0.1.13 (ReDoS, HIGH)
  - nodemailer 6.x patch
  - qs 6.7.x DoS (transitively через body-parser + express)

- .gitleaks.toml: расширен allowlist для scripts/indexnow.js* и
  scripts/indexnow-ping.sh — содержат публичный IndexNow KEY, не секрет.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-05-24 19:11:10 +03:00

1.7 KiB

Raw Blame History

View Raw