3 Commits
Author SHA1 Message Date
xBeaTz d97605f801 security: harden application security baseline
- Fixed SQL injection vulnerabilities with prepared statements
- Added column whitelist protection for dynamic termin updates
- Extracted iCloud credentials into protected config file
- Moved sensitive configuration files out of webroot
- Added authentication and admin checks to PVE APIs
- Added CSRF protection to write operations and APIs
- Disabled debug output in production mode
- Added centralized configuration handling
- Protected sensitive directories with access rules
- Added initial project security documentation
2026-07-22 02:23:34 +02:00
xBeaTz 28ebf1ff12 security: disable debug error output in production 2026-07-22 02:08:22 +02:00
xBeaTz 124f2746ac initial commit 2026-07-22 01:12:45 +02:00