Emanuel Almeida 7c83a9e168 fix(security): Resolve 21 SQL injection vulnerabilities and add transactions ...

Security fixes (v1.2.2):
- Fix SQL injection in analytics.ts (16 occurrences)
- Fix SQL injection in advanced-search.ts (1 occurrence)
- Fix SQL injection in search-queries.ts (1 occurrence)
- Add validateDaysInterval(), isValidISODate(), validatePeriod() to security.ts
- Use make_interval(days => N) for safe PostgreSQL intervals
- Validate UUIDs BEFORE string construction

Transaction support:
- bulk-operations.ts: 6 atomic operations with withTransaction()
- desk-sync.ts: 2 operations with transactions
- export-import.ts: 1 operation with transaction

Rate limiting:
- Add automatic cleanup of expired entries (every 5 minutes)

Audit:
- Archive previous audit docs to docs/audits/2026-01-31-v1.2.1/
- Create new AUDIT-REQUEST.md for v1.2.2 verification

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-31 14:47:41 +00:00

docs/audits/2026-01-31-v1.2.1

fix(security): Resolve 21 SQL injection vulnerabilities and add transactions

2026-01-31 14:47:41 +00:00

src

fix(security): Resolve 21 SQL injection vulnerabilities and add transactions

2026-01-31 14:47:41 +00:00

.env.example

feat: Initial release MCP Outline PostgreSQL v1.0.0

2026-01-31 13:25:09 +00:00

.gitignore

feat: Initial release MCP Outline PostgreSQL v1.0.0

2026-01-31 13:25:09 +00:00

AUDIT-REQUEST.md

fix(security): Resolve 21 SQL injection vulnerabilities and add transactions

2026-01-31 14:47:41 +00:00

CHANGELOG.md

fix(security): Resolve 21 SQL injection vulnerabilities and add transactions

2026-01-31 14:47:41 +00:00

CLAUDE.md

feat: Add export/import and Desk CRM sync tools (164 total)

2026-01-31 14:24:05 +00:00

CONTINUE.md

feat: Add export/import and Desk CRM sync tools (164 total)

2026-01-31 14:24:05 +00:00

package-lock.json

feat: Initial release MCP Outline PostgreSQL v1.0.0

2026-01-31 13:25:09 +00:00

package.json

feat: Initial release MCP Outline PostgreSQL v1.0.0

2026-01-31 13:25:09 +00:00

SPEC-MCP-OUTLINE.md

feat: Add 52 new tools bringing total to 160

2026-01-31 13:53:27 +00:00

tsconfig.json

feat: Initial release MCP Outline PostgreSQL v1.0.0

2026-01-31 13:25:09 +00:00

Description

MCP Server for Outline Wiki via PostgreSQL direct access - 86 tools

1.6 MiB

Languages

TypeScript 98.1%

JavaScript 1.6%

Shell 0.3%