adam/procurement-ingest
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/procurement-ingest.git synced 2026-10-02 09:43:25 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
37 commits 6 branches 0 tags 6.7 MiB
Commit graph

3 commits

Author SHA1 Message Date
Adam Moussa
afcd0eabe2 Add pagination to WO web UI scan 
get_work_orders() only fetched the first 1MB page from DynamoDB.
Loop on LastEvaluatedKey to match the PO web UI pattern.
 2026-05-12 14:32:41 -04:00
Adam Moussa
78eb8de067 Escape HTML in both web UI dashboards to prevent XSS 
Both Function URLs are public (auth_type=NONE) and render
email-derived content via f-strings. Attacker-crafted emails
could inject scripts. Added html.escape() on all interpolated
values in both PO and WO dashboards.
 2026-05-12 14:32:01 -04:00
Adam Moussa
5a1e774b7c Merge workorder-ingest pipeline into unified repo 
Move PO lambdas under lambdas/po/, add WO pipeline under lambdas/wo/.
Two independent CloudFormation stacks in one CDK app. Fix WO stack
compliance: ARM64 architecture, 60-day log retention, aarch64 bundling,
RETAIN on Anthropic secret. Remove stale CodePipeline buildspec.
 2026-05-12 14:12:17 -04:00