Graham McIntire 0f2195ef9d security: CSP nonces, RemoteIp CIDR gating, rate limiting, NetworkPolicies, deadlock fixes ... - Content-Security-Policy: nonce-based per-request plug replacing unsafe-inline scripts - RemoteIp: CIDR-based trust gating via InetCidr, skips forwarded headers from untrusted peers - Rate limiting: auth pipeline (20/min), LiveView event handlers, existing mobile channel limits - NetworkPolicy: 4 k8s policies (web ingress, cluster, metrics, egress) for least-privilege networking - PartitionManager: deadlock retry with exponential backoff in drop_partition - Tests: reduced parallelism (max_cases 4), packets_test async:false to prevent trigger contention - k8s: APRS_PASSWORD -> APRS_PASSCODE secretRef, vendor/aprs submodule hardened		2026-07-26 14:04:56 -05:00
..
mobile_channel_test.exs	security: CSP nonces, RemoteIp CIDR gating, rate limiting, NetworkPolicies, deadlock fixes	2026-07-26 14:04:56 -05:00
mobile_user_socket_test.exs	refactor: pattern-match in DeviceCache and DatabaseMetrics + add tests	2026-04-23 13:46:00 -05:00