Northstar Knowledge Vault

Story

The ops team claims the vault is safe because the reviewer invite format is documented, the preview service "blocks localhost", and the admin report engine does not use the usual {{...}} syntax.

• Reviewer tickets use base64url(json).hex_hmac.
• The search API accepts repeated tag= parameters because analytics stores the first tag while moderation inspects the final one.
• Reviewer preview fetches remote pages and adds the header X-Preview-Fetch: 1.
• The report engine uses custom delimiters and a small helper object, not Flask globals.

Register

Username Password Create account

Login

Username Password Login