Graham McIntire 095c5d3236 fix: M1 — prevent cross-org resource existence probing via scoped fetch ... Use Repo.get_by(schema, id: id, organization_id: organization_id) instead of Repo.get + pattern match so that resources from wrong orgs return :not_found instead of :forbidden, preventing org membership discovery.		2026-05-12 13:44:19 -05:00
..
channels	fix: 11 critical security/correctness bugs from code audit	2026-05-12 10:20:52 -05:00
components	test: lift coverage from 85.84% → 86.28%	2026-05-08 17:44:18 -05:00
controllers	fix: M1 — prevent cross-org resource existence probing via scoped fetch	2026-05-12 13:44:19 -05:00
endpoint	test: add LiveView tests following testing-liveview patterns	2026-05-07 12:55:39 -05:00
graphql	test: GraphQL.Resolvers.Schedule and Device coverage	2026-05-09 14:16:21 -05:00
helpers	test: lift coverage from 85.84% → 86.28%	2026-05-08 17:44:18 -05:00
integration	Merge remote-tracking branch 'origin/main' into feature/preseem-integration	2026-02-13 09:11:45 -06:00
live	fix: API token access control, admin form crash, MIB validation, CSP dedup	2026-05-12 09:08:57 -05:00
plugs	fix: 11 critical security/correctness bugs from code audit	2026-05-12 10:20:52 -05:00
changelog_parser_test.exs	remove-gleam (#218)	2026-03-29 11:03:20 -05:00
graphql_socket_test.exs	add mobile token auth to GraphQL endpoint (#48)	2026-03-16 15:23:07 -05:00
permissions_test.exs	fix snmp v3 test	2026-02-06 10:21:54 -06:00
plug_exceptions_test.exs	handle exceptions gracefully on api endpoints	2026-02-04 12:18:14 -06:00
remote_ip_test.exs	dialyzer: replace suppressions with real fixes where possible	2026-04-21 11:01:30 -05:00
telemetry_filter_test.exs	Add GeoIP import HTTP tests	2026-03-10 16:02:49 -05:00
telemetry_test.exs	feat(llm): per-insight-type prompt hints + flake fixes	2026-05-09 17:36:07 -05:00
user_auth_test.exs	fix: M3, M6, M7, M12 — open redirect, overfetch, missing constraint, admin defense-in-depth	2026-05-12 12:46:16 -05:00