11 Commits

Include renames

Author	SHA1	Message	Date
SimoandCursor	2ff08e5127	chore: patch deps, CSP style nonces, otplib 13, and PR CI ... Co-authored-by: Cursor <[email protected]>	2026-07-21 20:46:02 +02:00
SimoandCursor	9b47668fe9	chore: CSP script nonces, deploy health check, dead-code cleanup ... Add per-request CSP nonces (drop script unsafe-inline), post-deploy /api/health gate, bump next-auth to beta.32, and remove unused motion/cache/permission helpers. Co-authored-by: Cursor <[email protected]>	2026-07-21 20:27:08 +02:00
SimoandCursor	3403d3b19f	Fix admin permissions bounce, prefixes APIs, and Italian UI leftovers. ... Gate permissions on ACL manage + resolve super-admin from live user ranks, restore prefixes API routes, and anglicize hardcoded admin copy with nav i18n. Co-authored-by: Cursor <[email protected]>	2026-07-15 20:33:00 +02:00
openhands	df38dccbf1	style: format code biome	2026-07-13 21:57:41 +02:00
openhands	f6ad030c5b	Add EpicNext CMS foundation layer and fix critical security gaps ... - Create src/lib/foundation/ (860 LOC, 9 files): typed action wrappers, DbService with health checks, CSRF validation, safe redirects, AsyncLocalStorage request tracing, branded types, reusable Zod schemas - Migrate moderation.ts and user-settings.ts to foundation patterns - Fix abuse-guard.ts: bound in-memory Maps with LRU eviction (was unbounded) - Fix access-guard.ts: separate try/catch per check, log degradation instead of blanket fail-open - Replace raw redirect() calls with safeRedirect() in guard.ts and permissions.ts to prevent open-redirect attacks - Add CSRF validation to api-handler.ts for mutating methods - Add canonicalizeFormData() utility for FormData input sanitization	2026-07-13 12:03:49 +02:00
openhands	2e4ed76121	style: format code with prettier	2026-07-12 21:07:34 +02:00
remco	e85e4d74ea	revert fb8e77bb68 ... revert style: clean up code with prettier and eslint	2026-07-12 21:02:03 +02:00
openhands	fb8e77bb68	style: clean up code with prettier and eslint	2026-07-12 20:31:05 +02:00
Simo	f08e56cf53	fix: authorize super admins by dynamic highest rank	2026-07-11 22:35:40 +02:00
Simo	b695a33ead	fix: enforce public contrast and audit rank errors	2026-07-11 22:06:45 +02:00
Simo	0cd753c735	fix: restore complete admin feature dependencies	2026-07-11 21:15:54 +02:00