3 commits

Author	SHA1	Message	Date
Arthur Bassi	719a5b05fd	fix(work-orders): validate uploads before persist and store privately ... Board completion/media uploads now check domain state first, use server-controlled filenames with an allowlist, store under App_Data, and serve via authenticated download endpoints. Also harden WeekRolled log arguments against CodeQL log-injection findings.	2026-07-21 09:25:33 -03:00
Arthur Bassi	1eaf9b7c84	feat(work-orders): enrich board search overdue filters and 0-based paging ... Align week presets to Mon-Fri, treat types=Other as past-due, expand text search, whitelist sortBy, and use 0-based paging for advanced search without breaking 1-based PagedResult consumers.	2026-07-17 10:37:24 -03:00
Arthur Bassi	dd2a805c24	fix(work-orders): return 400 for invalid advanced-search custom date range ... Map ArgumentException from datePreset=custom without dates to BadRequest so the endpoint matches the Phase 4 contract.	2026-07-10 10:56:18 -03:00