Graham McIntire
ca7bb75472
- C1: Replace innerHTML template literals with DOM textContent in sites_map.ts - C2: Derive user_id from current_scope instead of client params in policy consent - C3: Fix broken halt() in GDPR data export (orphaned _ = ... halt()) - C4: Add owner/admin authorization check to MembersController update/delete - C5: Require HMAC signature on agent release webhook (was optional) - C6: Fix Repo.all_by/2 (not a real Ecto function) → Repo.all with query - C7: Move auth exemption to before_send callback in BruteForceProtection - C8: Block </style>/<script injection in status page custom_css validation - C9: Create secrets.example.yaml with placeholders; secrets.yaml already gitignored - C10: Load Stripe key from STRIPE_SECRET_KEY env var instead of hardcoded value - C13: Remove credentials from PubSub backup broadcast; channel resolves them C11 (no force_ssl): by design — Cloudflared terminates TLS C12 (device quota race): false positive — FOR UPDATE serializes correctly |
||
|---|---|---|
| .. | ||
| api_auth_test.exs | ||
| brute_force_protection_test.exs | ||
| capture_timezone_test.exs | ||
| check_policy_consent_test.exs | ||
| detect_eu_user_test.exs | ||
| filter_noisy_logs_test.exs | ||
| graphql_auth_test.exs | ||
| graphql_introspection_test.exs | ||
| mobile_auth_test.exs | ||
| rate_limit_test.exs | ||
| remote_ip_logger_test.exs | ||
| security_headers_test.exs | ||
| update_session_activity_test.exs | ||
| webhook_auth_test.exs | ||