| .. |
|
config
|
4a764f58f0
fix: remove unused APP_SECRET / UI_SECRET (SEC_REVIEW F66 + F67)
|
3 hari lalu |
|
docker
|
3556cd1920
fix: extend Permissions-Policy deny-list to full hardening (SEC_REVIEW F61)
|
3 hari lalu |
|
public
|
65c974f268
feat(ui): add brand logo to topnav left side
|
1 Minggu lalu |
|
resources
|
f044dbb6bc
fix: drop style-src 'unsafe-inline' (SEC_REVIEW F62)
|
3 hari lalu |
|
src
|
458a224a88
fix: require int getCode() before using as HTTP status (SEC_REVIEW F73)
|
3 hari lalu |
|
tests
|
458a224a88
fix: require int getCode() before using as HTTP status (SEC_REVIEW F73)
|
3 hari lalu |
|
.dockerignore
|
96eaa10c78
fix: add .dockerignore to api/ui build contexts (SEC_REVIEW F19)
|
4 hari lalu |
|
.php-cs-fixer.dist.php
|
d330d80b8a
feat(M01): monorepo skeleton, toolchain, docker compose builds clean
|
1 Minggu lalu |
|
CHANGELOG.md
|
717c0a5c2b
feat: subject filter for audit log; show actor-emitted rows on detail
|
1 Minggu lalu |
|
Dockerfile
|
33179d8bba
fix: drop container root; run api/ui as uid 1000 (SEC_REVIEW F18)
|
4 hari lalu |
|
composer.json
|
f66ceaf095
fix: tighten openid-connect-php constraint to ^1.0.2 (SEC_REVIEW F23)
|
4 hari lalu |
|
composer.lock
|
f66ceaf095
fix: tighten openid-connect-php constraint to ^1.0.2 (SEC_REVIEW F23)
|
4 hari lalu |
|
package-lock.json
|
193f6463a4
fix: drop CSP unsafe-inline/unsafe-eval via nonces + Alpine CSP build (SEC_REVIEW F24)
|
4 hari lalu |
|
package.json
|
193f6463a4
fix: drop CSP unsafe-inline/unsafe-eval via nonces + Alpine CSP build (SEC_REVIEW F24)
|
4 hari lalu |
|
phpstan.neon
|
d330d80b8a
feat(M01): monorepo skeleton, toolchain, docker compose builds clean
|
1 Minggu lalu |
|
phpunit.xml
|
d330d80b8a
feat(M01): monorepo skeleton, toolchain, docker compose builds clean
|
1 Minggu lalu |
|
postcss.config.js
|
d330d80b8a
feat(M01): monorepo skeleton, toolchain, docker compose builds clean
|
1 Minggu lalu |
|
tailwind.config.js
|
d330d80b8a
feat(M01): monorepo skeleton, toolchain, docker compose builds clean
|
1 Minggu lalu |
chiappa
458a224a88
fix: require int getCode() before using as HTTP status (SEC_REVIEW F73)