Bereket EngidaandClaude Opus 5
5c9501a54e
- notifySlack now throws on a non-2xx response. fetch resolves normally for a revoked or rate-limited webhook, so delivery could previously stay broken indefinitely without reaching the caller's error logging. The caller still swallows it, so a failed notification does not fail the submission. - Escape untrusted content before it reaches Slack. Every field comes from a public unauthenticated endpoint, so `<https://evil|looks-official>` link syntax and `<!channel>` could be injected into triage output. The message body now renders as plain_text, which processes no markup; the remaining mrkdwn (fallback text, metadata fields) is entity-escaped, and backticks in `context` are replaced so it cannot break out of its code fence. - Fix the JSON examples in /llms.txt and the per-page footer. Both embedded a union expression inside a JSON string, so an agent copying either one sent invalid JSON and got a 400 before learning the schema. They now show one valid enum value, with the allowed values listed alongside. - GET /api/feedback derives `endpoint` from the request instead of the hard-coded constant, so preview and self-hosted deployments describe the host that served the response. - Strip query and fragment from the stored referer and bound both referer and user-agent, so a token in a referring URL is not persisted. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Better Auth
Better Auth is a framework-agnostic authentication (and authorization) framework for TypeScript. It provides a comprehensive set of features out of the box and includes a plugin ecosystem that simplifies adding advanced functionalities with minimal code in a short amount of time. Whether you need 2FA, multi-tenant support, or other complex features, it lets you focus on building your actual application instead of reinventing the wheel.
Why Better Auth
Authentication in the TypeScript ecosystem is a half-solved problem. Other open-source libraries often require a lot of additional code for anything beyond basic authentication. Rather than just pushing third-party services as the solution, I believe we can do better as a community—hence, Better Auth.
Contribution
Better Auth is a free and open source project licensed under the MIT License. You are free to do whatever you want with it.
You could help continuing its development by:
Security
If you discover a security vulnerability within Better Auth, please send an e-mail to security@better-auth.com.
All reports will be promptly addressed, and you'll be credited accordingly.