2 commits

Author	SHA1	Message	Date
Graham McIntire	8338d0af1e	fix: remaining bugs.md findings — Repo calls, process dict, CSS, rate limits, Oban, debug route ... - Extract Repo calls from LiveViews into Agents.get_agent_token_for_org/2 and Accounts.verify_new_totp_device/2 context functions - Remove Process dictionary usage for cookie consent; use explicit assigns - Reject url() references in status page custom CSS changeset - Add per-organization rate limit check alongside per-IP - Document Oban flush as emergency-only with audit logging - Gate /admin/headers behind dev_routes (debug endpoint)	2026-05-11 19:34:18 -05:00
Graham McIntire	3632580d1b	fix: address security and reliability findings from bugs.md review ... - Client IP: only trust X-Forwarded-For from RFC 1918 proxy IPs - Webhook auth: handle nil/blank secret with controlled error, not 500 crash - Sudo redirect: reuse validated return_path? from login to prevent open redirect - Map live: remove redundant inline script (ensureLeaflet hook handles loading) - Bang calls: convert crash-prone exact matches to case in QR live and API controllers	2026-05-11 18:54:12 -05:00