Graham McIntire ca7bb75472 fix: 11 critical security/correctness bugs from code audit ... - C1: Replace innerHTML template literals with DOM textContent in sites_map.ts - C2: Derive user_id from current_scope instead of client params in policy consent - C3: Fix broken halt() in GDPR data export (orphaned _ = ... halt()) - C4: Add owner/admin authorization check to MembersController update/delete - C5: Require HMAC signature on agent release webhook (was optional) - C6: Fix Repo.all_by/2 (not a real Ecto function) → Repo.all with query - C7: Move auth exemption to before_send callback in BruteForceProtection - C8: Block </style>/<script injection in status page custom_css validation - C9: Create secrets.example.yaml with placeholders; secrets.yaml already gitignored - C10: Load Stripe key from STRIPE_SECRET_KEY env var instead of hardcoded value - C13: Remove credentials from PubSub backup broadcast; channel resolves them C11 (no force_ssl): by design — Cloudflared terminates TLS C12 (device quota race): false positive — FOR UPDATE serializes correctly		2026-05-12 10:20:52 -05:00
..
assets	fix/traffic-graph-rendering-and-polarity (#130)	2026-03-23 15:24:44 -05:00
integration	routeros fixes and latency rounding	2026-02-09 17:30:06 -06:00
mix/tasks	test: lift coverage from 85.84% → 86.28%	2026-05-08 17:44:18 -05:00
snmpkit	feat(insights): AI surfaces its own observations from full network state	2026-05-10 14:29:56 -05:00
support	feat: end-to-end /coverage compute pipeline + antenna catalog + cnHeat-style form	2026-05-06 14:32:38 -05:00
towerops	fix: 11 critical security/correctness bugs from code audit	2026-05-12 10:20:52 -05:00
towerops_web	fix: 11 critical security/correctness bugs from code audit	2026-05-12 10:20:52 -05:00
test_helper.exs	test: in-process Redis fake instead of skipping Redis-backed tests	2026-05-10 11:32:50 -05:00
towerops_native_test.exs	fix: resolve typing violation and ETS cache race in tests	2026-02-14 12:32:43 -06:00