Commit Graph
100 Commits
Author SHA1 Message Date
hikmettan bdde4534f6 vary CORS responses by origin 2026-09-06 18:18:19 +03:00
hikmettan 7a3915a679 verify CORS origin allowlist 2026-09-06 18:17:25 +03:00
hikmettan 089f5c36f0 allow configuring CORS origins 2026-09-06 18:16:27 +03:00
hikmettan c1e542f634 restrict exchange amount input types 2026-09-06 18:15:21 +03:00
hikmettan a76a35c14d extract exchange amount validation 2026-09-06 18:14:31 +03:00
hikmettan 55efb8675c expose tender match score accessibly 2026-09-06 18:13:30 +03:00
hikmettan fe67802679 improve exchange amount accessibility 2026-09-06 18:12:30 +03:00
hikmettan 3f30e64004 validate exchange calculator amounts 2026-09-06 18:11:42 +03:00
hikmettan 9b41ace2c7 clarify live tender cache fallback 2026-09-06 18:10:39 +03:00
hikmettan 99cfba7a3d lazy load PDF text extraction 2026-09-06 18:09:58 +03:00
hikmettan 6e78485228 skip malformed tender rows during deduplication 2026-09-06 18:09:06 +03:00
hikmettan 6b3b446e49 normalize health portfolio identifiers 2026-09-06 18:07:55 +03:00
hikmettan 231c372411 validate health portfolio profile writes 2026-09-06 18:07:10 +03:00
hikmettan 64919270d8 validate Telegram bot token in production 2026-09-06 18:03:39 +03:00
hikmettan e70126b312 record email delivery input validation 2026-09-06 18:01:13 +03:00
hikmettan 348e32377c validate email delivery inputs 2026-09-06 18:01:13 +03:00
hikmettan 052dd16768 record CORS preflight test 2026-09-06 18:00:12 +03:00
hikmettan 0e1ee33606 test CORS preflight handling 2026-09-06 18:00:12 +03:00
hikmettan d579d1f0f4 record CORS preflight support 2026-09-06 17:59:28 +03:00
hikmettan 1d6bb71478 support CORS preflight requests 2026-09-06 17:59:28 +03:00
hikmettan 61dd409997 record Stripe cancellation confirmation 2026-09-06 17:58:14 +03:00
hikmettan f1b283b3d9 verify Stripe cancellation was scheduled 2026-09-06 17:58:14 +03:00
hikmettan 5cefd915c0 record safe Stripe plan fallback 2026-09-06 17:56:48 +03:00
hikmettan a5cfc93424 default unknown Stripe plans to free 2026-09-06 17:56:48 +03:00
hikmettan 7a05024daf record Stripe plan allowlist 2026-09-06 17:56:08 +03:00
hikmettan 8f62f2f0cf restrict Stripe webhook plan ids 2026-09-06 17:56:07 +03:00
hikmettan 661612d97f record Stripe checkout field guard 2026-09-06 17:55:24 +03:00
hikmettan 182f6dc05c harden Stripe checkout webhook fields 2026-09-06 17:55:24 +03:00
hikmettan c34b0edf15 record API security header test 2026-09-06 17:54:24 +03:00
hikmettan 851506bb30 test API security headers 2026-09-06 17:54:24 +03:00
hikmettan ddee8cf69c record API security headers 2026-09-06 17:53:33 +03:00
hikmettan d6040379c2 add API response security headers 2026-09-06 17:53:33 +03:00
hikmettan f54f79e8ef record auth token expiry guard 2026-09-06 17:52:34 +03:00
hikmettan 2cac68e6ba require expiration on auth tokens 2026-09-06 17:52:34 +03:00
hikmettan 304682a07f record Stripe cancellation boolean guard 2026-09-06 17:51:46 +03:00
hikmettan efe10a9fc4 require boolean Stripe cancellation state 2026-09-06 17:51:46 +03:00
hikmettan 451c9d916c record Stripe period end guard 2026-09-06 17:51:05 +03:00
hikmettan 4c9354362a validate Stripe period end timestamps 2026-09-06 17:51:05 +03:00
hikmettan 60dc7a1760 record email config authorization 2026-09-06 17:50:18 +03:00
hikmettan 4edbdc94e5 protect email configuration endpoint 2026-09-06 17:50:18 +03:00
hikmettan b5020f4217 record Stripe cancellation timestamp guard 2026-09-06 17:49:09 +03:00
hikmettan 5bffc66fc6 validate Stripe cancellation timestamp 2026-09-06 17:49:09 +03:00
hikmettan dd230a1d8c record Stripe cancellation guard 2026-09-06 17:48:13 +03:00
hikmettan fc45d8e934 validate Stripe cancellation responses 2026-09-06 17:48:13 +03:00
hikmettan b6cb45070b record Stripe checkout response guard 2026-09-06 17:47:26 +03:00
hikmettan cd06cafddf validate Stripe checkout responses 2026-09-06 17:47:26 +03:00
hikmettan 66e4f53639 record UTF8 request limit fix 2026-09-06 17:46:25 +03:00
hikmettan d7c1680f0a enforce request limits in UTF8 bytes 2026-09-06 17:46:25 +03:00
hikmettan 5eac4088f5 record cancellation body fix 2026-09-06 17:45:38 +03:00
hikmettan fbe74b0919 fix subscription cancellation body parsing 2026-09-06 17:45:38 +03:00
hikmettan 5e2d255b29 record Stripe event validation 2026-09-06 17:44:43 +03:00
hikmettan 84ce2b8155 validate Stripe webhook event shape 2026-09-06 17:44:43 +03:00
hikmettan bb96f0d9ac record email test payload validation 2026-09-06 17:43:49 +03:00
hikmettan b737795eef validate email test payloads 2026-09-06 17:43:49 +03:00
hikmettan 987b90b4c6 record notification endpoint errors 2026-09-06 17:43:01 +03:00
hikmettan ac5fda9050 return validation errors for notification reads 2026-09-06 17:43:01 +03:00
hikmettan 559c338a0e record weekly manifest tests 2026-09-06 17:41:53 +03:00
hikmettan ce28269a53 test invalid weekly manifests 2026-09-06 17:41:53 +03:00
hikmettan d86604afa9 record brief manifest enqueue guard 2026-09-06 17:40:53 +03:00
hikmettan 9cd3476670 validate brief manifests before enqueue 2026-09-06 17:40:53 +03:00
hikmettan a85650c1ba record seen tender history validation 2026-09-06 17:40:12 +03:00
hikmettan 846431ca17 surface malformed seen tender history 2026-09-06 17:40:12 +03:00
hikmettan 0d5794a44b record AI result validation 2026-09-06 17:39:25 +03:00
hikmettan 78d6cb7de2 validate completed AI results 2026-09-06 17:39:25 +03:00
hikmettan 424de8d67a record weekly message field validation 2026-09-06 17:38:43 +03:00
hikmettan c6dfd26387 validate weekly brief message fields 2026-09-06 17:38:43 +03:00
hikmettan f5d20e7a82 record weekly brief manifest guard 2026-09-06 17:38:04 +03:00
hikmettan b9a71a83dc validate weekly brief manifests 2026-09-06 17:38:04 +03:00
hikmettan 55785fe3d1 record AI job JSON validation 2026-09-06 17:37:16 +03:00
hikmettan 9e90d04ef5 validate persisted AI job JSON 2026-09-06 17:37:16 +03:00
hikmettan 78531f23ba record Google claim validation 2026-09-06 17:36:20 +03:00
hikmettan d02b6f0f3c validate Google identity claims 2026-09-06 17:36:19 +03:00
hikmettan cbb87d8094 record dedicated production auth secret 2026-09-06 17:35:40 +03:00
hikmettan 887cd5872f separate public client id from auth secret 2026-09-06 17:35:40 +03:00
hikmettan 0958d90408 record legacy filter migration guard 2026-09-06 17:34:57 +03:00
hikmettan ed1f061019 validate legacy notification filters 2026-09-06 17:34:57 +03:00
hikmettan cf5d0355fa record auth fail closed behavior 2026-09-06 17:34:13 +03:00
hikmettan d9b6e11582 fail closed on missing auth secret 2026-09-06 17:34:13 +03:00
hikmettan 0759c3e0ac record production auth secret guard 2026-09-06 17:33:35 +03:00
hikmettan 410bd2de1f require auth secret in production 2026-09-06 17:33:35 +03:00
hikmettan db3d2d67bc record subscription filter validation 2026-09-06 17:32:37 +03:00
hikmettan 7bda9cf3f6 surface malformed subscription filters 2026-09-06 17:32:37 +03:00
hikmettan 968d4f00ef record notification payload validation 2026-09-06 17:31:52 +03:00
hikmettan 89b9a85227 validate notification payload JSON 2026-09-06 17:31:52 +03:00
hikmettan 19b79c32a7 record notification history validation 2026-09-06 17:31:07 +03:00
hikmettan 7f9de80de9 validate notification history arrays 2026-09-06 17:31:07 +03:00
hikmettan 6d86ff2c3a record raw body hardening 2026-09-06 17:29:29 +03:00
hikmettan 3e73849480 harden raw request body parsing 2026-09-06 17:29:29 +03:00
hikmettan cd6a39558c record request body hardening 2026-09-06 17:28:52 +03:00
hikmettan 47286fe847 stop oversized request body parsing 2026-09-06 17:28:51 +03:00
hikmettan dc0d471ce5 record closed tender output guard 2026-09-06 17:27:36 +03:00
hikmettan d5b2b9dd14 block closed tender outputs 2026-09-06 17:27:36 +03:00
hikmettan edb609e742 record delivery review validation 2026-09-06 17:26:35 +03:00
hikmettan 615d8fe69d validate delivery review metadata 2026-09-06 17:26:35 +03:00
hikmettan 6a061e5800 record delivery message validation 2026-09-06 17:25:46 +03:00
hikmettan ba33531a12 validate delivery message text fields 2026-09-06 17:25:46 +03:00
hikmettan 1afe871cfa record delivery queue validation 2026-09-06 17:25:10 +03:00
hikmettan f494579e1a validate delivery queue rows 2026-09-06 17:25:10 +03:00
hikmettan 43b21572ae record notification panel busy state 2026-09-06 17:24:24 +03:00
hikmettan 101dc1436d announce notification panel loading state 2026-09-06 17:24:24 +03:00