Daniel Bedeleanu
|
704934165f
|
Build [v.1.3.6]
|
2026-04-11 17:14:22 +03:00 |
|
Daniel Bedeleanu
|
247ea45408
|
security: audit complet + patch vulnerabilitati critice v1.3.5
Audit de securitate executat pe Backend (FastAPI) si Frontend (Next.js/Dexie).
12 vulnerabilitati identificate (4 CRITICE, 4 HIGH, 3 MEDIUM, 1 LOW).
Patch-uri aplicate direct:
- [C-02] Eliminat bypass autentificare pentru useri fara parola (users.py)
- [C-03] Parola default Admin inlocuita cu secrets.token_urlsafe(16) (users.py)
- [H-01] LDAP injection fix: escape_filter_chars pe username (users.py)
- [H-03] Validare MIME + limita 10MB pe /items/extract-label (items.py)
- [M-01] CORS fix: allow_origins din env ALLOWED_ORIGINS, nu wildcard (main.py)
- [M-03] Toate print() LDAP inlocuite cu log.debug() (users.py)
Raport complet: dev_docs/SECURITY_REPORT.md
Actiuni arhitecturale ramase (JWT enforcement, rate limiting): SESSION_STATE.md
Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
|
2026-04-11 13:20:05 +03:00 |
|
Daniel Bedeleanu
|
903c65a4b4
|
docs: archive gemini session and hand over to claude for security audit
|
2026-04-11 13:03:19 +03:00 |
|
Daniel Bedeleanu
|
432cd28ca5
|
docs: refactor documentation for portability and SSOT v1.2.7
|
2026-04-11 11:57:13 +03:00 |
|
Daniel Bedeleanu
|
4136d49936
|
style: ui readability refactor v1.2.2 (removed uppercase, tracking, increased font sizes)
|
2026-04-11 11:22:40 +03:00 |
|
Daniel Bedeleanu
|
99b70a9de8
|
Docs: Finalize session logs and handover for v1.2.1
|
2026-04-10 22:00:05 +03:00 |
|
Daniel Bedeleanu
|
8a3783c7e9
|
Infrastructure: Implement master/dev/vX branching, save git path, and fix username casing
|
2026-04-10 21:51:22 +03:00 |
|
Daniel Bedeleanu
|
373652e8b8
|
feat: AI coordination protocol and advanced audit operations
|
2026-04-10 13:57:42 +03:00 |
|