Graham McIntie 9ecd01dc8f Security hardening: remaining audit fixes ... - Encrypt session cookies (add encryption_salt to endpoint) - X-Frame-Options: SAMEORIGIN → DENY (match CSP frame-ancestors 'none') - Remove unsafe-eval from CSP script-src - Apply security headers in all environments (not just prod) - Add GraphQL query complexity limit (max 500) via Absinthe.Plug - GraphQL introspection already blocked in prod via plug Closes audit items #6, #7, #12, #13, #14, #16		2026-02-15 12:54:38 -06:00
..
channels	test fix and preseem check fix	2026-02-13 09:42:39 -06:00
components	add row_link to table component for proper anchor tags	2026-02-11 08:46:03 -06:00
controllers	fix: allow site_id on device create regardless of use_sites setting	2026-02-15 12:28:06 -06:00
helpers	feat: add 12/24-hour time format setting with consistent timezone display	2026-02-13 15:16:29 -06:00
integration	Merge remote-tracking branch 'origin/main' into feature/preseem-integration	2026-02-13 09:11:45 -06:00
live	Fix tests, credo issues, and Gaiia sync bugs	2026-02-15 11:55:49 -06:00
plugs	Security hardening: remaining audit fixes	2026-02-15 12:54:38 -06:00
permissions_test.exs	fix snmp v3 test	2026-02-06 10:21:54 -06:00
plug_exceptions_test.exs	handle exceptions gracefully on api endpoints	2026-02-04 12:18:14 -06:00
user_auth_test.exs	fix test warnings and failures	2026-02-05 15:24:41 -06:00