c3db6bfa2b
- .env.example: vider les secrets (à rotater côté Plesk)
- src/lib/auth.ts: fail-fast lazy si ADMIN_JWT_SECRET < 32 chars
- src/pages/api/upload.ts: retirer .svg (anti-XSS) + try/catch FS
- src/pages/api/content/[section].ts: masquer err.message (sauf ZodError)
- retirer gsap/three/@types/three/@react-three/{fiber,drei}/lucide-react
- bump astro 6.1.10 (GHSA-xr5h-phrj-8vxv)
- zod 4: z.email()/z.url() au lieu de .email()/.url()
- nettoyer vars inutilisées + Header script is:inline
Vitest (38 tests, 615ms):
- tests/lib/auth.test.ts: verifyPassword + verifySession (round-trip, secrets distincts)
- tests/lib/content.test.ts: load/save + comportement seed
- tests/api/files.test.ts: path traversal (../, /, imbriqué) + 200
- tests/api/upload.test.ts: extension/taille/sanitize folder + bucket
- tests/middleware.test.ts: gating admin pages vs APIs vs routes publiques
- astro check: 0 errors / 0 warnings / 0 hints
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
23 lines
684 B
TypeScript
23 lines
684 B
TypeScript
import { z } from 'zod';
|
|
|
|
export const ProjectSchema = z.object({
|
|
id: z.string(),
|
|
title: z.string(),
|
|
subtitle: z.string().optional(),
|
|
description: z.string(),
|
|
image: z.string().optional(),
|
|
category: z.enum(['web', 'mobile', 'bot', 'infra', 'other']).default('web'),
|
|
status: z.enum(['live', 'archived', 'private', 'wip']).default('live'),
|
|
url: z.url().optional(),
|
|
repoUrl: z.url().optional(),
|
|
stack: z.array(z.string()).default([]),
|
|
featured: z.boolean().default(false),
|
|
});
|
|
|
|
export const ProjectsSchema = z.object({
|
|
items: z.array(ProjectSchema),
|
|
});
|
|
|
|
export type Project = z.infer<typeof ProjectSchema>;
|
|
export type Projects = z.infer<typeof ProjectsSchema>;
|