mostalive/firehose
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
firehose/app
History
Willem van den Ende 6887ae4087 Security: Validate blog controller inputs (page param, blog ID) 
Ran a claude /security-review, fixed two vulnerabilities

  Use a plug to resolve blog_id, returning a clean 404 for unknown blogs
  instead of raising with inspect(). Parse page param with Integer.parse
  so invalid values (non-numeric, negative, zero) fall back to page 1
  instead of crashing. Add 5 tests covering these cases.a
2026-03-17 12:17:29 +00:00
..
assets
Self host fonts
2026-03-17 11:43:32 +00:00
config
Static blog with front page summary
2026-03-17 11:17:21 +00:00
lib
Security: Validate blog controller inputs (page param, blog ID)
2026-03-17 12:17:29 +00:00
priv
Self host fonts
2026-03-17 11:43:32 +00:00
test
Security: Validate blog controller inputs (page param, blog ID)
2026-03-17 12:17:29 +00:00
.formatter.exs
Static blog with front page summary
2026-03-17 11:17:21 +00:00
.gitignore
Static blog with front page summary
2026-03-17 11:17:21 +00:00
AGENTS.md
Static blog with front page summary
2026-03-17 11:17:21 +00:00
mix.exs
Static blog with front page summary
2026-03-17 11:17:21 +00:00
mix.lock
Static blog with front page summary
2026-03-17 11:17:21 +00:00
README.md
Static blog with front page summary
2026-03-17 11:17:21 +00:00

README.md

Firehose

To start your Phoenix server:

  • Run mix setup to install and setup dependencies
  • Start Phoenix endpoint with mix phx.server or inside IEx with iex -S mix phx.server

Now you can visit localhost:4000 from your browser.

Ready to run in production? Please check our deployment guides.

Learn more