chiappa 1ed16c03a3 fix: Origin/Referer + JSON-body checks on CsrfMiddleware (SEC_REVIEW F54) 4 days ago
..
ApiClient 5c15fc5fcf fix: require confirm:"SEED" on /maintenance/seed-demo (SEC_REVIEW F15) 5 days ago
App 8ff409fff2 fix: tighten /ips/{ip} route pattern to IP charset (SEC_REVIEW F43) 4 days ago
Auth 30c0604e49 fix: rotate CSRF token on session-id regeneration (SEC_REVIEW F40) 4 days ago
Controllers cc77749fca fix: enforce role allowlist on UI policy proxies (SEC_REVIEW F42) 4 days ago
Http 1ed16c03a3 fix: Origin/Referer + JSON-body checks on CsrfMiddleware (SEC_REVIEW F54) 4 days ago
Logging 3a4026baf6 fix: log fingerprints, not raw identifiers, in auth flows (SEC_REVIEW F34) 4 days ago
Support d330d80b8a feat(M01): monorepo skeleton, toolchain, docker compose builds clean 1 week ago