towerops/test
Graham McIntie 9ecd01dc8f Security hardening: remaining audit fixes
- Encrypt session cookies (add encryption_salt to endpoint)
- X-Frame-Options: SAMEORIGIN → DENY (match CSP frame-ancestors 'none')
- Remove unsafe-eval from CSP script-src
- Apply security headers in all environments (not just prod)
- Add GraphQL query complexity limit (max 500) via Absinthe.Plug
- GraphQL introspection already blocked in prod via plug

Closes audit items #6, #7, #12, #13, #14, #16
2026-02-15 12:54:38 -06:00
..
integration routeros fixes and latency rounding 2026-02-09 17:30:06 -06:00
mix/tasks more tests 2026-02-03 10:19:56 -06:00
snmpkit Fix tests, credo issues, and Gaiia sync bugs 2026-02-15 11:55:49 -06:00
support fix: resolve compilation errors, test failures, and credo issues 2026-02-14 12:23:10 -06:00
towerops fix: Gaiia and Preseem sync bugs from API response mismatches 2026-02-15 12:23:47 -06:00
towerops_web Security hardening: remaining audit fixes 2026-02-15 12:54:38 -06:00
test_helper.exs complete overhaul of snmp engine to C nif 2026-01-30 12:27:12 -06:00
towerops_native_test.exs fix: resolve typing violation and ETS cache race in tests 2026-02-14 12:32:43 -06:00