procurement-ingest

adam/procurement-ingest

Fork 0

mirror of https://github.com/Sea-Haven-Industries/procurement-ingest.git synced 2026-10-02 16:43:23 +00:00

Commit graph

Author	SHA1	Message	Date
Adam Moussa	78eb8de067	Escape HTML in both web UI dashboards to prevent XSS Both Function URLs are public (auth_type=NONE) and render email-derived content via f-strings. Attacker-crafted emails could inject scripts. Added html.escape() on all interpolated values in both PO and WO dashboards.	2026-05-12 14:32:01 -04:00
Adam Moussa	5a1e774b7c	Merge workorder-ingest pipeline into unified repo Move PO lambdas under lambdas/po/, add WO pipeline under lambdas/wo/. Two independent CloudFormation stacks in one CDK app. Fix WO stack compliance: ARM64 architecture, 60-day log retention, aarch64 bundling, RETAIN on Anthropic secret. Remove stale CodePipeline buildspec.	2026-05-12 14:12:17 -04:00

Author

SHA1

Message

Date

Adam Moussa

78eb8de067

Escape HTML in both web UI dashboards to prevent XSS

Both Function URLs are public (auth_type=NONE) and render
email-derived content via f-strings. Attacker-crafted emails
could inject scripts. Added html.escape() on all interpolated
values in both PO and WO dashboards.

2026-05-12 14:32:01 -04:00

Adam Moussa

5a1e774b7c

Merge workorder-ingest pipeline into unified repo

Move PO lambdas under lambdas/po/, add WO pipeline under lambdas/wo/.
Two independent CloudFormation stacks in one CDK app. Fix WO stack
compliance: ARM64 architecture, 60-day log retention, aarch64 bundling,
RETAIN on Anthropic secret. Remove stale CodePipeline buildspec.

2026-05-12 14:12:17 -04:00

2 commits