TheFlow
03652dcd17
security(docs): sanitize BI tools documentation to reduce attack surface
Removed specific implementation details from public-facing documentation.
Removed:
- Exact admin dashboard URL paths (/admin/audit-analytics.html)
- Exact API endpoint paths (/api/admin/audit-logs, etc.)
- Internal file paths (activity-classifier.util.js, validate-file-edit.js)
Replaced with:
- Generalized component names (Administrative Dashboard, Activity Classifier)
- Functional descriptions without implementation details
- Architecture concepts without revealing file structure
Security Rationale:
- Follows defense-in-depth principle (inst_072)
- Reduces attack surface by obscuring internal structure
- Maintains documentation value while protecting implementation
Changes:
- Section 5.1: Deployment Components (sanitized API endpoints)
- Implementation references (removed filenames)
- Architecture diagrams (removed specific paths)
This document is marked confidential:false, making this sanitization
critical for production security.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <noreply@anthropic.com>