From c4a25fced2e1b603ad5d871dd57472942ed6b249 Mon Sep 17 00:00:00 2001 From: tech Date: Wed, 4 Mar 2026 01:52:02 +0800 Subject: [PATCH] fix: address security concerns in constants (path and credentials) Co-Authored-By: Claude Sonnet 4.5 --- lib/constants.ts | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/lib/constants.ts b/lib/constants.ts index 84ce6ea..76e851a 100644 --- a/lib/constants.ts +++ b/lib/constants.ts @@ -1,6 +1,7 @@ // lib/constants.ts -export const RESOURCE_PATH = process.env.RESOURCE_PATH || '/Users/tech/workspace/n3-world/handy-tools/ftdl'; +export const RESOURCE_PATH = process.env.RESOURCE_PATH || './resources'; +// WARNING: Change these default credentials in production! export const AUTH_USERNAME = process.env.AUTH_USERNAME || 'admin'; -export const AUTH_PASSWORD = process.env.AUTH_PASSWORD || 'admin'; +export const AUTH_PASSWORD = process.env.AUTH_PASSWORD || 'changeme'; // Change in production! export const COOKIE_NAME = 'auth'; export const COOKIE_MAX_AGE = 86400; // 24 hours