diff options
| author | Adam Soltys <[email protected]> | 2026-06-13 14:21:39 -0700 |
|---|---|---|
| committer | Adam Soltys <[email protected]> | 2026-06-13 14:21:39 -0700 |
| commit | 43427afe5b0b16d887163bd788360ac29105d69c (patch) | |
| tree | 43863f8f27e9b0360e89663e558d2b81c54f8976 /lib/api.js.map | |
| parent | a44bcd511da7216c4cd3782ac24997cc7a82f186 (diff) | |
| download | coinos-server-43427afe5b0b16d887163bd788360ac29105d69c.tar.gz coinos-server-43427afe5b0b16d887163bd788360ac29105d69c.zip | |
payments: freeze matches uid as well as username (rename-proof)
The blacklist (send freeze) only matched the current username, so a
compromised account could shake the freeze by renaming itself. Match on
either the lowercased username OR the immutable uid; add the uid to the
`blacklist` set to freeze durably.
Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
Diffstat (limited to 'lib/api.js.map')
0 files changed, 0 insertions, 0 deletions