UNITRONIX 235c9c0706 security: implement Phase 0-3 remediation (deps, SQL ident, JWT, CSP, suite) ...

Bump axios/multer and npm overrides; add safeSqlIdent and multer cleanup;
harden JWT aud/iss/nbf; CSP without unsafe-eval via static protobuf build
and data-bd-call delegation; ship Security Test Suite v1.2.0 and docs.
Ignore generated RdClient protobuf artifacts (~40k lines) — rebuild locally
with npm run protocols:rdclient.

Thanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow); muopc (@muopc)

2026-10-17 15:33:48 +02:00

..

AUDIT_LOG.md

security(3.4): harden console and Go server for pre-release audit

2026-07-12 20:44:46 +02:00

AUDIT_PRODUCTION_2026-04-10.md

security: fix 3 critical + 3 high findings from production audit

2026-05-26 13:35:12 +02:00

COMPLIANCE.md

feat: organizations, desktop mode, i18n (ja/ko/ru), security docs, client i18n integration

2026-03-25 20:27:04 +01:00

ENCRYPTION_SPEC.md

feat: organizations, desktop mode, i18n (ja/ko/ru), security docs, client i18n integration

2026-03-25 20:27:04 +01:00

LOGIN_API_SECURITY_AUDIT_2026-04-26_PL.md

fix(security): harden login and audit endpoints

2026-04-26 02:09:44 +02:00

LOGIN_API_SECURITY_AUDIT_2026-04-26.md

fix(security): harden login and audit endpoints

2026-04-26 02:09:44 +02:00

PR-346-live-session-reporting-review.md

feat(security): integrate reviewed contributor fixes on dev

2026-09-17 03:44:18 +02:00

PR-346-transport-threat-model.md

feat(security): integrate reviewed contributor fixes on dev

2026-09-17 03:44:18 +02:00

SECURITY_TEST_SUITE.md

security: implement Phase 0-3 remediation (deps, SQL ident, JWT, CSP, suite)

2026-10-17 15:33:48 +02:00

THREAT_MODEL.md

feat: organizations, desktop mode, i18n (ja/ko/ru), security docs, client i18n integration

2026-03-25 20:27:04 +01:00