Graham McIntire 3632580d1b fix: address security and reliability findings from bugs.md review ... - Client IP: only trust X-Forwarded-For from RFC 1918 proxy IPs - Webhook auth: handle nil/blank secret with controlled error, not 500 crash - Sudo redirect: reuse validated return_path? from login to prevent open redirect - Map live: remove redundant inline script (ensureLeaflet hook handles loading) - Bang calls: convert crash-prone exact matches to case in QR live and API controllers		2026-05-11 18:54:12 -05:00
..
v1	fix: address security and reliability findings from bugs.md review	2026-05-11 18:54:12 -05:00
account_data_controller.ex	dialyzer: fix all unmatched_return warnings (154 → 0)	2026-04-21 10:03:55 -05:00
error_helpers.ex	perf: disable Req retry for faster error tests	2026-03-10 16:19:31 -05:00
mobile_auth_controller.ex	fix: return raw session token instead of hash in mobile QR login (#42)	2026-03-16 13:59:52 -05:00
mobile_controller.ex	tests: raise coverage to 70% via helper promotion + new unit/property tests	2026-04-24 09:49:06 -05:00