graham/towerops
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
towerops/lib/towerops_web/controllers/api/v1
History
Graham McIntire f87657fbfb fix: M20, M21, M22, L14 — archive safety, ETS protection, impersonation expiry, check pagination 
- M20: Add check_no_hardlinks and check_no_special_files to MIB upload
  archive extraction to prevent hard link, device node, and FIFO attacks
- M21: Change RateLimit ETS table from :public to :protected; route hit/get/reset
  through GenServer.call instead of direct ETS access
- M22: Add 8-hour impersonation timeout — store impersonated_at in session and
  auto-revoke impersonation when expired
- L14: Add default limit (500) and optional offset to list_checks for pagination
2026-05-12 14:22:20 -05:00
..
activity_controller.ex fix: 6 medium-severity bugs (M2, M8, M9, M10, M11, M16) 2026-05-12 11:38:13 -05:00
agent_release_webhook_controller.ex fix: 11 critical security/correctness bugs from code audit 2026-05-12 10:20:52 -05:00
agents_controller.ex fix: resolve compilation errors, test failures, and credo issues 2026-02-14 12:23:10 -06:00
alerts_controller.ex fix: resolve compilation errors, test failures, and credo issues 2026-02-14 12:23:10 -06:00
check_results_controller.ex reliability-audit-fixes (#181) 2026-03-26 14:10:36 -05:00
checks_controller.ex fix: M1 — prevent cross-org resource existence probing via scoped fetch 2026-05-12 13:44:19 -05:00
coverages_controller.ex fix: 6 medium-severity bugs (M2, M8, M9, M10, M11, M16) 2026-05-12 11:38:13 -05:00
devices_controller.ex fix: M1 — prevent cross-org resource existence probing via scoped fetch 2026-05-12 13:44:19 -05:00
escalation_policies_controller.ex fix: M1 — prevent cross-org resource existence probing via scoped fetch 2026-05-12 13:44:19 -05:00
gaiia_webhook_controller.ex refactor(webhooks): enqueue Oban jobs immediately, ACK fast 2026-05-10 17:18:23 -05:00
geoip_controller.ex dialyzer: fix remaining 88 warnings — clean dialyzer run 2026-04-21 10:32:42 -05:00
integrations_controller.ex perf+refactor: codebase-wide query and antipattern audit 2026-04-28 16:58:51 -05:00
invitations_controller.ex fix: resolve compilation errors, test failures, and credo issues 2026-02-14 12:23:10 -06:00
maintenance_windows_controller.ex fix: M1 — prevent cross-org resource existence probing via scoped fetch 2026-05-12 13:44:19 -05:00
members_controller.ex fix: 11 critical security/correctness bugs from code audit 2026-05-12 10:20:52 -05:00
mib_controller.ex fix: M20, M21, M22, L14 — archive safety, ETS protection, impersonation expiry, check pagination 2026-05-12 14:22:20 -05:00
mikrotik_webhook_controller.ex feat(mikrotik): webhook receiver for MikroTik RouterOS events 2026-05-11 18:02:21 -05:00
organization_controller.ex fix: use correct auth check for API organization updates 2026-03-10 13:41:38 -05:00
pagerduty_webhook_controller.ex refactor(webhooks): enqueue Oban jobs immediately, ACK fast 2026-05-10 17:18:23 -05:00
schedules_controller.ex fix: M1 — prevent cross-org resource existence probing via scoped fetch 2026-05-12 13:44:19 -05:00
sites_controller.ex fix: M1 — prevent cross-org resource existence probing via scoped fetch 2026-05-12 13:44:19 -05:00
stripe_webhook_controller.ex refactor(webhooks): enqueue Oban jobs immediately, ACK fast 2026-05-10 17:18:23 -05:00