diff --git a/server/index.ts b/server/index.ts index c4bffa7..ea3e2d2 100644 --- a/server/index.ts +++ b/server/index.ts @@ -7,7 +7,7 @@ import { sanitizeLog } from "./utils"; const app = express(); const httpServer = createServer(app); -// Sentinel: Add security headers +// Add security headers app.use((_req, res, next) => { res.setHeader("X-Content-Type-Options", "nosniff"); res.setHeader("X-XSS-Protection", "1; mode=block"); diff --git a/server/routes.ts b/server/routes.ts index 429a410..fa979fa 100644 --- a/server/routes.ts +++ b/server/routes.ts @@ -79,7 +79,7 @@ export async function registerRoutes( await setupAuth(app); registerAuthRoutes(app); - // Sentinel: Add rate limiting to AI endpoints + // Add rate limiting to AI endpoints app.use("/api/generate", aiRateLimiter.middleware); app.use("/api/audio", aiRateLimiter.middleware); app.use("/api/stable-audio", aiRateLimiter.middleware); @@ -87,7 +87,7 @@ export async function registerRoutes( app.use("/api/suno", aiRateLimiter.middleware); app.use("/api/ace-step", aiRateLimiter.middleware); - // Sentinel: Protect integration routes (chat & image) + // Protect integration routes (chat & image) // These routes were previously unprotected, allowing unauthenticated access to AI resources app.use("/api/conversations", isAuthenticated, aiRateLimiter.middleware); app.use("/api/generate-image", isAuthenticated, aiRateLimiter.middleware);