Graham McIntire 095c5d3236 fix: M1 — prevent cross-org resource existence probing via scoped fetch ... Use Repo.get_by(schema, id: id, organization_id: organization_id) instead of Repo.get + pattern match so that resources from wrong orgs return :not_found instead of :forbidden, preventing org membership discovery.		2026-05-12 13:44:19 -05:00
..
v1	fix: M1 — prevent cross-org resource existence probing via scoped fetch	2026-05-12 13:44:19 -05:00
account_data_controller.ex	fix: 6 medium-severity bugs (M2, M8, M9, M10, M11, M16)	2026-05-12 11:38:13 -05:00
error_helpers.ex	perf: disable Req retry for faster error tests	2026-03-10 16:19:31 -05:00
mobile_auth_controller.ex	fix: 3 more high-severity bugs (H19, H20, H25)	2026-05-12 11:32:20 -05:00
mobile_controller.ex	fix: 10 high-severity bugs from code audit (H1-H5, H14-H16, H27, H30)	2026-05-12 10:55:01 -05:00
param_filter.ex	fix: 5 more high-severity bugs (H6, H8, H17, H18)	2026-05-12 11:04:31 -05:00