public_git/bambuddy
1
0
Fork 0
mirror of https://github.com/maziggy/bambuddy.git synced 2026-10-06 22:21:29 +02:00
Code Issues Packages Projects Releases Wiki Activity
2,507 Commits 55 Branches 83 Tags
f7c94cbc7b22e3c8acadabe32d36216dfd12888f
Commit Graph
2 Commits
Author SHA1 Message Date
maziggy fa6edfbcde Fix stored XSS vulnerabilities and unauthenticated auth toggle 
- Sanitize project notes with DOMPurify before rendering via
    dangerouslySetInnerHTML (ProjectDetailPage.tsx)
  - Replace hand-rolled HTML sanitizer with DOMPurify in ProjectPageModal
    to prevent attribute injection via crafted 3MF href values
  - Block /api/v1/auth/setup when auth is already enabled to prevent
    unauthenticated clients from disabling authentication remotely
 2026-03-15 15:31:49 +01:00
Martin Ziegler 53c94deade Added project page viewer and editor 2025-11-28 12:41:28 +01:00