Address security review findings: - Validate event_type against whitelist of 7 known types (M-3) - Validate metadata is valid JSON and under 10KB (M-2, M-4) - Include metadata in audit log details (M-2) - Wrap timeline insert + audit write + timestamp update in a SQLite transaction for atomicity (M-5) - Fix TypeScript TimelineEvent interface: add issue_id, metadata fields and correct created_at type to string (L-3) - Add timeline_events to IssueDetail TypeScript interface (L-4) |
||
|---|---|---|
| .. | ||
| ai.rs | ||
| analysis.rs | ||
| db.rs | ||
| docs.rs | ||
| image.rs | ||
| integrations.rs | ||
| mod.rs | ||
| system.rs | ||