copilot-swe-agent[bot] 06091546b0 fix(sharing): address security review findings ...

- Use per-password random salt with PBKDF2-HMAC-SHA256 (stored as salt:hash)
- Increase PBKDF2 iterations to 600,000 (OWASP 2023 recommendation)
- Password for downloads now accepted via POST body (never URL query param)
- Fail download request if view count cannot be incremented (prevents bypass)
- Update tests to match new hashing format and POST password download

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>

2026-03-08 21:55:55 +00:00

..

static

feat(sharing): add document sharing with expiring links

2026-03-08 21:51:30 +00:00

templates

fix(sharing): address security review findings

2026-03-08 21:55:55 +00:00