prop/lib/microwaveprop/radio
Graham McIntire dd13a5f2a5 Fix three security issues
1. Prevent user_id impersonation in contact submissions
   - Remove user_id from submission_changeset cast fields
   - Pass user_id as a separate server-side argument to create_contact/2
   - Client form params can no longer forge account-linked contacts

2. Restrict flag toggle to admins only
   - Add admin? guard to toggle_flag event handler
   - Hide flag button from non-admin users in template

3. Reset enrichment on timestamp edits
   - Add qso_timestamp to the fields that trigger enrichment reset
   - Prevents stale weather/HRRR/IEMRE data after time changes
2026-04-12 10:31:23 -05:00
..
adif_import.ex Use daisyUI components for stats, alerts, cards, and tabs 2026-04-12 09:20:20 -05:00
callsign_client.ex Add dialyzer specs and types across the codebase 2026-04-12 08:55:04 -05:00
contact.ex Fix three security issues 2026-04-12 10:31:23 -05:00
contact_edit.ex Add dialyzer specs and types across the codebase 2026-04-12 08:55:04 -05:00
csv_import.ex Fix credo warnings: struct specs, length/1, and test patterns 2026-04-12 10:26:53 -05:00
edit_notifier.ex Add contact edit approval system with admin review queue 2026-04-11 16:15:49 -05:00
enrichment_status.ex Add dialyzer specs and types across the codebase 2026-04-12 08:55:04 -05:00
maidenhead.ex Add /beacons CRUD and /users admin page 2026-04-08 12:01:45 -05:00