Graham McIntire 3bdc4b6a11 Fix 4 critical bugs and document remaining findings ... - TOCTOU race: add partial unique index + rescue constraint violation on concurrent contact insert (radio.ex:737-768) - Mass assignment: remove :user_id from @optional_fields (contact.ex:85) - Stale path_live result: clear result when URL params change (path_live.ex:105) - Blocking migrations: wrap Release.migrate() in Task.start (application.ex:79) - Rate limiter: fix guard for monitor tokens (not is_nil vs is_binary) - findings.md: document remaining non-critical bugs and improvements		2026-05-29 15:27:33 -05:00
..
rate_limiter	fix(security,perf): address 9 audit findings (access control, DoS, crashes)	2026-05-11 18:53:21 -05:00
auth.ex	feat: secure /api/v1 REST API for regular-user actions	2026-05-09 08:59:54 -05:00
error_json.ex	feat: secure /api/v1 REST API for regular-user actions	2026-05-09 08:59:54 -05:00
fallback_controller.ex	feat: secure /api/v1 REST API for regular-user actions	2026-05-09 08:59:54 -05:00
monitor_auth.ex	feat(api): ingest endpoint for propmonitor beacon measurements	2026-05-13 16:07:04 -05:00
rate_limiter.ex	Fix 4 critical bugs and document remaining findings	2026-05-29 15:27:33 -05:00