d4c476002c
- Migrated all admin views from inline JS string templates to EJS - Integrated SmartAdmin template with dark sidebar, fixed header, CSS grid - Added express-ejs-layouts for master layout wrapper - Security: - CSRF protection (double-submit cookie) - Rate limiting on /login (5/15min) - Token revocation via jti + globalLogoutTimestamp - Re-auth (reauth_token) for destructive endpoints - Settings whitelist (ALLOWED_KEYS) + removed process.exit - Seed phrases no longer rendered in HTML (CSV export only) - Multer fileFilter for image uploads + safe filename generation - SQL injection fix (currency column allowlist) - Global error handler + asyncHandler wrapper - New files: csrf.js, errorHandler.js, error.ejs, all EJS templates - SmartAdmin assets: CSS, icons, webfonts, plugins, scripts
36 lines
831 B
JSON
36 lines
831 B
JSON
{
|
|
"name": "telegram-shop-bot",
|
|
"version": "1.0.0",
|
|
"type": "module",
|
|
"scripts": {
|
|
"start": "node src/index.js",
|
|
"dev": "nodemon src/index.js"
|
|
},
|
|
"dependencies": {
|
|
"archiver": "^7.0.1",
|
|
"axios": "^1.7.7",
|
|
"better-sqlite3": "^11.10.0",
|
|
"bip39": "^3.1.0",
|
|
"bitcoinjs-lib": "^6.1.6",
|
|
"cookie-parser": "^1.4.6",
|
|
"csv-writer": "^1.6.0",
|
|
"decompress": "^4.2.1",
|
|
"dotenv": "^16.3.1",
|
|
"ecpair": "^2.1.0",
|
|
"ejs": "^6.0.1",
|
|
"ethereumjs-util": "^7.1.5",
|
|
"express": "^4.21.0",
|
|
"express-ejs-layouts": "^2.5.1",
|
|
"hdkey": "^2.1.0",
|
|
"multer": "^2.2.0",
|
|
"node-telegram-bot-api": "^0.64.0",
|
|
"pino": "^8.21.0",
|
|
"pino-pretty": "^13.1.3",
|
|
"tiny-secp256k1": "^2.2.3"
|
|
},
|
|
"devDependencies": {
|
|
"nodemon": "^3.0.2",
|
|
"playwright": "^1.61.1"
|
|
}
|
|
}
|