 chiappa
|
4dab4f8f5a
docs: mark SEC_REVIEW F15 as fixed in 5c15fc5
|
5 天之前 |
|
chiappa
|
5c15fc5fcf
fix: require confirm:"SEED" on /maintenance/seed-demo (SEC_REVIEW F15)
|
5 天之前 |
|
chiappa
|
dbbe007f06
docs: mark SEC_REVIEW F14 as fixed in 9849779
|
5 天之前 |
|
chiappa
|
98497796c9
fix: rate-limit /api/v1/auth/* (SEC_REVIEW F14)
|
5 天之前 |
|
chiappa
|
2bec88ea2a
docs: mark SEC_REVIEW F13 as fixed in 40be6c1
|
5 天之前 |
|
chiappa
|
40be6c1875
fix: auto-revoke previous service tokens on rotation (SEC_REVIEW F13)
|
5 天之前 |
|
chiappa
|
6395be9919
docs: mark SEC_REVIEW F12 as fixed in 4006743
|
5 天之前 |
|
chiappa
|
400674340e
fix: harden local-admin lookup against is_local-flip tamper (SEC_REVIEW F12)
|
5 天之前 |
|
chiappa
|
57327dd6ac
docs: mark SEC_REVIEW F11 as fixed in f2dd3fd
|
5 天之前 |
|
chiappa
|
f2dd3fddee
fix: gate impersonation on user active-status, add actor_via audit signal (SEC_REVIEW F11)
|
5 天之前 |
|
chiappa
|
2d08caf5d4
docs: mark SEC_REVIEW F10 as fixed in 55156c5
|
5 天之前 |
|
chiappa
|
55156c51d8
fix: validate next-redirect targets to block off-origin Location values (SEC_REVIEW F10)
|
5 天之前 |
|
chiappa
|
3a0f2b86a4
docs: mark SEC_REVIEW F9 as fixed in 2a57589
|
5 天之前 |
|
chiappa
|
2a5758925c
fix: rotate session id at /login/oidc before OIDC state is stashed (SEC_REVIEW F9)
|
5 天之前 |
|
chiappa
|
7032bda148
docs: mark SEC_REVIEW F8 as fixed in f811b25
|
5 天之前 |
|
chiappa
|
f811b25734
fix: fail-closed on session id rotation when headers already sent (SEC_REVIEW F8)
|
5 天之前 |
|
chiappa
|
ba4072b01e
docs: mark SEC_REVIEW F7 as fixed in 84238e6
|
5 天之前 |
|
chiappa
|
84238e6592
fix: run password_verify on every local-login attempt for constant-time response (SEC_REVIEW F7)
|
5 天之前 |
|
chiappa
|
97b49c87b4
docs: mark SEC_REVIEW F6 as fixed in d119b72
|
5 天之前 |
|
chiappa
|
d119b72dfe
fix: persist login throttle state to a file shared by FrankenPHP workers (SEC_REVIEW F6)
|
5 天之前 |
|
chiappa
|
5a749338b2
docs: mark SEC_REVIEW F4 and F5 as fixed in 8d948ae
|
5 天之前 |
|
chiappa
|
8d948ae676
fix: make admin audit emit transactional with mutation (SEC_REVIEW F4, F5)
|
5 天之前 |
|
chiappa
|
ffa20733d1
docs: mark SEC_REVIEW F3 as fixed in 8a94dff
|
5 天之前 |
|
chiappa
|
8a94dff6ae
fix: enforce single local-admin row in upsertLocal (SEC_REVIEW F3)
|
5 天之前 |
|
chiappa
|
41db33781f
docs: mark SEC_REVIEW F1 and F2 as fixed in 466d686
|
5 天之前 |
|
chiappa
|
466d686840
fix: harden local-login throttle against XFF spoof and IP rotation
|
5 天之前 |
|
chiappa
|
9ca5a4ad91
docs: add SEC_REVIEW.md with multi-agent security review findings
|
5 天之前 |
|
chiappa
|
c3ad5bcd77
style: rework chart palette to a clean glass-like aesthetic
|
1 周之前 |
|
chiappa
|
c3e657bca8
style: mute chart palette to match logo's emerald brand colors
|
1 周之前 |
|
chiappa
|
717c0a5c2b
feat: subject filter for audit log; show actor-emitted rows on detail
|
1 周之前 |
