 chiappa
|
99f985045d
Docs: mark R01-N19 fixed in f59f368
|
2 dienas atpakaļ |
|
chiappa
|
f59f368765
Fix R01-N19: CSP report-uri + audit endpoint
|
2 dienas atpakaļ |
|
chiappa
|
cebaf0b5a8
Docs: mark R01-N16 / R01-N17 / R01-N18 closed, refresh SPEC §3 / §9 / §11 / §13
|
2 dienas atpakaļ |
|
chiappa
|
ef9b9b865c
Fix R01-N16, doc R01-N17: composer-audit helper + admin-manual cadence note
|
2 dienas atpakaļ |
|
chiappa
|
a0b717e874
Fix R01-N18: trust OIDC email only when issuer hasn't marked it unverified
|
2 dienas atpakaļ |
|
chiappa
|
50f9bd2728
Docs: mark R01-N09 / R01-N13 / R01-N14 fixed, refresh SPEC §3 / §9 / §11 / §13
|
2 dienas atpakaļ |
|
chiappa
|
d7dbfb587e
Fix R01-N13 + R01-N14: fatal-error safety net + XLSX session cap
|
2 dienas atpakaļ |
|
chiappa
|
868fe6c2a6
Docs: mark R01-N12 fixed, refresh SPEC §9 / §13
|
2 dienas atpakaļ |
|
chiappa
|
1b28469a4e
Fix R01-N12: validate audit date filters server-side
|
2 dienas atpakaļ |
|
chiappa
|
d6b163d5fe
Docs: mark R01-N10 fixed, refresh SPEC §9 / §13
|
2 dienas atpakaļ |
|
chiappa
|
c1dbfc1ad4
Fix R01-N10: bind sprint_id with placeholder in MAX(sort_order) lookups
|
2 dienas atpakaļ |
|
chiappa
|
a8ed6afef2
Docs: mark R01-N08 fixed, refresh SPEC §9 / §11 / §13
|
2 dienas atpakaļ |
|
chiappa
|
bc745cdcfe
Fix R01-N08: idle session timeout + CSRF rotation on login
|
2 dienas atpakaļ |
|
chiappa
|
97018093e0
Docs: mark R01-N05 / R01-N07 fixed, refresh SPEC §8 / §9 / §11 / §13
|
2 dienas atpakaļ |
|
chiappa
|
a2e77ea22a
Fix R01-N05 + R01-N07: trusted-proxy aware HTTPS + client IP
|
2 dienas atpakaļ |
|
chiappa
|
f705d7b32e
Docs: mark R01-N03 fixed, refresh SPEC §3 / §8 / §9 / §11 / §13
|
2 dienas atpakaļ |
|
chiappa
|
f565c86d1d
Fix R01-N03: explicit env-bootstrap for the first OIDC admin
|
2 dienas atpakaļ |
|
chiappa
|
2b8f1673f1
Docs: mark R01-N06 fixed, refresh SPEC §3 / §4 / §7 / §9 / §11 / §13
|
2 dienas atpakaļ |
|
chiappa
|
e295432bef
Fix R01-N06: throttle local-admin login by (ip, email)
|
2 dienas atpakaļ |
|
chiappa
|
851f8cf15a
Docs: mark R01-N11 fixed, refresh SPEC §9 / §13
|
2 dienas atpakaļ |
|
chiappa
|
4ae1817673
Fix R01-N11: whitelist column in AuditRepository::distinctColumn
|
2 dienas atpakaļ |
|
chiappa
|
270c0c1708
Docs: mark R01-N15 fixed, refresh SPEC §9 / §13
|
2 dienas atpakaļ |
|
chiappa
|
d16bff4616
Fix R01-N15: add noreferrer to external task URL link
|
2 dienas atpakaļ |
|
chiappa
|
48a351c1f6
Docs: mark R01-N01 fixed, refresh SPEC §9 / §11 / §13
|
2 dienas atpakaļ |
|
chiappa
|
857df15c93
Fix R01-N01: hash-only LOCAL_ADMIN_PASSWORD_HASH (no plaintext fallback)
|
2 dienas atpakaļ |
|
chiappa
|
f075e1281c
Docs: mark R01-N04 fixed, refresh SPEC §9 / §13
|
2 dienas atpakaļ |
|
chiappa
|
296883c5a3
Fix R01-N04: drop unused SESSION_SECRET from env template + docs
|
2 dienas atpakaļ |
|
chiappa
|
18389bb4b3
Docs: mark R01-N02 / R01-N31 fixed, refresh SPEC §9 / §11 / §13
|
2 dienas atpakaļ |
|
chiappa
|
7fd849bb92
Fix R01-N02 / R01-N31: gate runtime panel on home page to admins
|
2 dienas atpakaļ |
|
chiappa
|
912ef9b8cc
doc/REVIEW_01.md: initial security + fishy-pattern audit
|
2 dienas atpakaļ |
