5 Commits

Include renames

Author	SHA1	Message	Date
openhands	259c0c96ab	Fix remaining Snyk findings: XSS in validImageUrl, cipher integrity suppression	2026-07-10 23:40:11 +02:00
openhands	d782b7c4c2	Fix Snyk security findings: XSS, open redirect, hardcoded secrets, cookie security, MD5 replacement	2026-07-10 23:34:57 +02:00
openhands	1875a69b83	Fix security scanner findings ... - Replace hardcoded test secrets with crypto-generated values in laravel-encrypter.test.ts and totp.test.ts - Add 'secure' attribute to locale cookie in language-switcher.tsx - Validate image URLs before rendering in media-grid.tsx and media-picker.tsx (XSS prevention) - Validate redirect URL is HTTPS before window.location assignment in TopUpForm.tsx (open redirect prevention) - Document intentional MD5 usage for legacy PHP compatibility in password.ts - Document HMAC integrity protection for CBC cipher in laravel-encrypter.ts	2026-07-10 23:08:15 +02:00
openhands	518c072491	refactor: convert admin pages to Tailwind and improve media uploads; fix TypeScript error in commandocentrum	2026-07-02 17:26:16 +02:00
remco	12576cc113	feat: media library with image picker for article forms, browse/upload from folder	2026-07-01 17:00:35 +02:00