graham/towerops
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
towerops/test/towerops_web/controllers
History
Graham McIntire 6fa0b791f2 fix: M3, M6, M7, M12 — open redirect, overfetch, missing constraint, admin defense-in-depth 
- M3: Replace blacklist-based valid_return_path? with whitelist of known app
  route prefixes, plus URI decoding to prevent %2f encoding bypasses
- M6: Replace full-org device/link load in get_node_detail with targeted
  join query filtering by discovered node fields
- M7: Add partial unique index on (organization_id, email) for pending
  invitations (WHERE accepted_at IS NULL)
- M12: Add on_mount superuser verification to all 7 admin LiveViews for
  defense-in-depth
2026-05-12 12:46:16 -05:00
..
api fix: 3 more high-severity bugs (H19, H20, H25) 2026-05-12 11:32:20 -05:00
admin_controller_test.exs test: expand coverage across resolvers, vendors, controllers, workers 2026-05-07 14:23:58 -05:00
api_docs_controller_test.exs test: lift coverage from 85.84% → 86.28% 2026-05-08 17:44:18 -05:00
debug_controller_test.exs fix: remaining bugs.md findings — Repo calls, process dict, CSS, rate limits, Oban, debug route 2026-05-11 19:34:18 -05:00
error_html_test.exs Fix tests, credo issues, and Gaiia sync bugs 2026-02-15 11:55:49 -06:00
error_json_test.exs security: implement comprehensive security audit fixes 2026-03-05 13:08:10 -06:00
graphql_docs_controller_test.exs test: lift coverage from 85.84% → 86.28% 2026-05-08 17:44:18 -05:00
health_controller_test.exs fix: 3 more high-severity bugs (H19, H20, H25) 2026-05-12 11:32:20 -05:00
invitation_controller_test.exs refactor/dry-improvements (#202) 2026-03-28 10:56:34 -05:00
page_controller_test.exs feat: add Accept: text/markdown content negotiation for agent compatibility 2026-04-17 14:14:31 -05:00
page_html_test.exs fix: resolve compilation errors, test failures, and credo issues 2026-02-14 12:23:10 -06:00
sitemap_controller_test.exs test: improve sitemap controller test coverage 2026-04-17 14:00:57 -05:00
user_confirmation_controller_test.exs test: add on-call, incident, and PagerDuty notification test coverage 2026-03-14 15:10:27 -05:00
user_registration_controller_test.exs test: add controller and LiveView test coverage for untested endpoints 2026-03-14 15:21:12 -05:00
user_reset_password_controller_test.exs test: lift coverage 78.42% → 79.59% with focused unit + integration tests 2026-05-07 18:40:43 -05:00
user_session_controller_test.exs fix: M3, M6, M7, M12 — open redirect, overfetch, missing constraint, admin defense-in-depth 2026-05-12 12:46:16 -05:00
user_session_html_test.exs purge more passkey and gettext updates 2026-02-02 10:20:59 -06:00
user_settings_controller_test.exs Convert User Settings from controller to LiveView 2026-01-15 16:29:50 -06:00
user_settings_html_test.exs remove passkeys for now 2026-01-31 09:50:35 -06:00
user_sudo_controller_test.exs fix: address UserSudoController critical issues 2026-02-01 14:45:05 -06:00
well_known_controller_test.exs feat: add /.well-known discovery endpoints for agent readiness 2026-04-17 14:06:51 -05:00