Graham McIntire a9579b84f0 fix: H11 — load session salts from env vars instead of hardcoded 8-byte values ... SESSION_SIGNING_SALT, SESSION_ENCRYPTION_SALT, and LIVE_VIEW_SIGNING_SALT are now loaded from environment variables in production. Dev/test keep the previous defaults via config.exs. k8s/secrets.yaml has placeholder entries; the user fills in real values before applying.		2026-05-12 14:03:31 -05:00
..
config.exs	fix: H11 — load session salts from env vars instead of hardcoded 8-byte values	2026-05-12 14:03:31 -05:00
dev.exs	fix: 11 critical security/correctness bugs from code audit	2026-05-12 10:20:52 -05:00
prod.exs	fix: H12 cookie hardening + 5 low/medium bugs (L2, L5, L6, L8, L10, L11)	2026-05-12 11:22:47 -05:00
runtime.exs	fix: H11 — load session salts from env vars instead of hardcoded 8-byte values	2026-05-12 14:03:31 -05:00
test.exs	test: in-process Redis fake instead of skipping Redis-backed tests	2026-05-10 11:32:50 -05:00