fix(security): rate limiting, CORS restriction, tableName allowlist, non-root Docker, migration entrypoint, aria-live

2026-04-15 13:25:18 -04:00
parent 5460a93217
commit 9b3c883bf0
11 changed files with 146 additions and 15 deletions
@@ -10,5 +10,8 @@ CMD ["npm", "run", "dev"]

 FROM base AS prod
 COPY . .
+# Generate Prisma client in the production image
 RUN npx prisma generate
-CMD ["npm", "start"]
+# Run as non-root user
+USER node
+CMD ["node", "src/index.js"]