adam/shoc-backend
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/shoc-backend.git synced 2026-10-07 16:19:07 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
124 commits 12 branches 2 tags 23 MiB
Commit graph

2 commits

Author SHA1 Message Date
Arthur Bassi
c12cd3c17e fix(work-orders): harden private file path containment and WeekRolled logs 
Reject sibling-prefix path escapes in private storage and log WeekRolled dates as int components to clear CodeQL log-injection findings.
 2026-07-21 14:20:00 -03:00
Arthur Bassi
719a5b05fd fix(work-orders): validate uploads before persist and store privately 
Board completion/media uploads now check domain state first, use server-controlled filenames with an allowlist, store under App_Data, and serve via authenticated download endpoints. Also harden WeekRolled log arguments against CodeQL log-injection findings.
 2026-07-21 09:25:33 -03:00