IonWarpbotcommented 2 min agoIonWarp Review — PR #528
2 issues| 2 P1
#SevIssueFile
1Token scope check removed inside generated churnapi/export.ts
2Billing migration drops the price column still read at checkoutdb/migrations/0042.sql
api/export.ts
181920
−++
return exportProject(projectId);await assertTokenProjectScope(token, projectId);return exportProject(projectId);
A one-line authorization regression is buried in lockfile churn · PR Metrics
The PR is described as a dependency update, but api/export.ts also removes the token’s project-scope check. A project-scoped token can now request another project’s export. Review this changed line first.
Suggested fixAI fix prompt