UNITRONIX 8d3a5d4a69 fix(rbac): enforce persisted role permission overrides ...

Align the Node panel with Go role_permissions, protect user-directory paths and relays, and add regression coverage. Make the embedded worker test explicitly select its optional maintainer mode.

Refs #468

Thanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow); muopc (@muopc)

2026-10-21 01:31:03 +02:00

..

auth.js

fix(rbac): enforce persisted role permission overrides

2026-10-21 01:31:03 +02:00

csrf.js

fix: resolve 8 GitHub issues (#90 #97 #100 #82 #78 #75 #98 #68)

2026-04-10 00:00:04 +02:00

deviceAuth.js

fix(security): harden TLS defaults, device auth, and update privileges

2026-08-15 23:28:03 +02:00

goApiProxy.js

fix: keep WAN heartbeat stable

2026-09-13 18:17:45 +02:00

guestAccess.js

fix(web-remote): guest page 500 and cookie hijack (Refs #274)

2026-07-20 23:29:52 +02:00

i18n.js

feat(settings): simplify appearance configuration

2026-09-19 11:00:34 +02:00

rateLimiter.js

feat(console): coordinate service restarts and login metadata

2026-09-18 18:26:42 +02:00

security.js

security: implement Phase 0-3 remediation (deps, SQL ident, JWT, CSP, suite)

2026-10-17 15:33:48 +02:00

wanSecurity.js

fix: keep WAN heartbeat stable

2026-09-13 18:17:45 +02:00

wsOrigin.js

security: fix 3 critical + 3 high findings from production audit

2026-05-26 13:35:12 +02:00