graham/towerops
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
towerops/lib/towerops_web/live/admin
History
Graham McIntire 6fa0b791f2 fix: M3, M6, M7, M12 — open redirect, overfetch, missing constraint, admin defense-in-depth 
- M3: Replace blacklist-based valid_return_path? with whitelist of known app
  route prefixes, plus URI decoding to prevent %2f encoding bypasses
- M6: Replace full-org device/link load in get_node_detail with targeted
  join query filtering by discovered node fields
- M7: Add partial unique index on (organization_id, email) for pending
  invitations (WHERE accepted_at IS NULL)
- M12: Add on_mount superuser verification to all 7 admin LiveViews for
  defense-in-depth
2026-05-12 12:46:16 -05:00
..
agent_live fix: M3, M6, M7, M12 — open redirect, overfetch, missing constraint, admin defense-in-depth 2026-05-12 12:46:16 -05:00
audit_live fix: M3, M6, M7, M12 — open redirect, overfetch, missing constraint, admin defense-in-depth 2026-05-12 12:46:16 -05:00
org_live fix: M3, M6, M7, M12 — open redirect, overfetch, missing constraint, admin defense-in-depth 2026-05-12 12:46:16 -05:00
security_live fix: M3, M6, M7, M12 — open redirect, overfetch, missing constraint, admin defense-in-depth 2026-05-12 12:46:16 -05:00
user_live fix: M3, M6, M7, M12 — open redirect, overfetch, missing constraint, admin defense-in-depth 2026-05-12 12:46:16 -05:00
dashboard_live.ex fix: M3, M6, M7, M12 — open redirect, overfetch, missing constraint, admin defense-in-depth 2026-05-12 12:46:16 -05:00
dashboard_live.html.heex rename "Admin Dashboard" to "Dashboard" 2026-03-10 13:36:03 -05:00
monitoring_live.ex fix: M3, M6, M7, M12 — open redirect, overfetch, missing constraint, admin defense-in-depth 2026-05-12 12:46:16 -05:00
monitoring_live.html.heex i18n: wrap all user-facing strings in gettext() 2026-02-14 17:44:01 -06:00