 chiappa
|
c439ce1db3
fix: scrub raw JWTs and short Bearers in log output (SEC_REVIEW F65)
|
4 giorni fa |
|
chiappa
|
a37e769d2c
docs: mark SEC_REVIEW F64 as fixed by F22
|
4 giorni fa |
|
chiappa
|
637a7b92eb
docs: mark SEC_REVIEW F63 as fixed in d225bfe
|
4 giorni fa |
|
chiappa
|
d225bfe6b9
fix: pin Twig autoescape strategy to 'html' (SEC_REVIEW F63)
|
4 giorni fa |
|
chiappa
|
25f10f0d01
docs: mark SEC_REVIEW F62 as fixed in f044dbb
|
4 giorni fa |
|
chiappa
|
f044dbb6bc
fix: drop style-src 'unsafe-inline' (SEC_REVIEW F62)
|
4 giorni fa |
|
chiappa
|
75e6df3060
docs: mark SEC_REVIEW F61 as fixed in 3556cd1
|
4 giorni fa |
|
chiappa
|
3556cd1920
fix: extend Permissions-Policy deny-list to full hardening (SEC_REVIEW F61)
|
4 giorni fa |
|
chiappa
|
6ff3720983
docs: mark SEC_REVIEW F60 as fixed in 68121fe
|
4 giorni fa |
|
chiappa
|
68121febe2
fix: make HSTS header operator-tuneable for preload opt-in (SEC_REVIEW F60)
|
4 giorni fa |
|
chiappa
|
a1356f9eb2
docs: mark SEC_REVIEW F59 as fixed in 206db1e
|
4 giorni fa |
|
chiappa
|
206db1e492
fix: add COOP / CORP / Cross-Domain-Policies headers (SEC_REVIEW F59)
|
4 giorni fa |
|
chiappa
|
b2d81caa70
docs: mark SEC_REVIEW F58 as fixed in 95e206c
|
4 giorni fa |
|
chiappa
|
95e206c436
fix: pin RapiDoc CDN load with SRI hash on /api/docs (SEC_REVIEW F58)
|
4 giorni fa |
|
chiappa
|
6b06ff379e
docs: mark SEC_REVIEW F57 as fixed in 67011c8
|
4 giorni fa |
|
chiappa
|
67011c8cea
fix: prefix session cookie with __Host- in production (SEC_REVIEW F57)
|
4 giorni fa |
|
chiappa
|
de80c1f318
docs: mark SEC_REVIEW F56 as fixed by F24 (193f646)
|
4 giorni fa |
|
chiappa
|
ee1582d904
docs: mark SEC_REVIEW F55 as fixed by F24 (193f646)
|
4 giorni fa |
|
chiappa
|
ea92c3d093
docs: mark SEC_REVIEW F54 as fixed in 1ed16c0
|
4 giorni fa |
|
chiappa
|
1ed16c03a3
fix: Origin/Referer + JSON-body checks on CsrfMiddleware (SEC_REVIEW F54)
|
4 giorni fa |
|
chiappa
|
f54d83d21e
docs: mark SEC_REVIEW F53 as fixed by F24 (193f646)
|
4 giorni fa |
|
chiappa
|
6f5429e958
docs: mark SEC_REVIEW F52 as fixed in e5b525b
|
4 giorni fa |
|
chiappa
|
e5b525b393
fix: strip C0/C1 control chars from admin string fields (SEC_REVIEW F52)
|
4 giorni fa |
|
chiappa
|
d336550c19
docs: mark SEC_REVIEW F51 as fixed in 9c0fef5
|
4 giorni fa |
|
chiappa
|
9c0fef58d2
fix: enforce list<string> shape in RoleMappingRepository (SEC_REVIEW F51)
|
4 giorni fa |
|
chiappa
|
1ed9341c2c
docs: mark SEC_REVIEW F50 as fixed in 6cc66ef
|
4 giorni fa |
|
chiappa
|
6cc66ef4ec
fix: tight redirect policy + private-host guard on GeoIP client (SEC_REVIEW F50)
|
4 giorni fa |
|
chiappa
|
8210d3ee58
docs: mark SEC_REVIEW F49 as fixed in 6580a5b
|
4 giorni fa |
|
chiappa
|
6580a5b3cd
fix: stream DB-IP gunzip with size cap (SEC_REVIEW F49)
|
4 giorni fa |
|
chiappa
|
781c356f38
docs: mark SEC_REVIEW F48 as fixed in c380d12
|
4 giorni fa |
