a57ecfa

Fix remaining LOW/MEDIUM audit findings: F2-5 (error_log), F1-2 (login+IP rate key), F1-1 (fail-closed + no DROP TABLE), F4-2 (MCP secrets), F3-3 (quarantine html), F5-1 (CLI guards)

2026-07-10T18:49:10+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files58

Core0

Module0

Forbidden0

Files

api/config/security.php (security)
api/controller/mcp/McpController.php (api)
api/scripts/ai_cron.php (api)
api/scripts/api_coverage_check.php (api)
api/scripts/client_data_quality_report.php (api)
api/scripts/cron_push.php (api)
api/scripts/db_orphan_checker.php (api)
api/scripts/docs_index_check.php (api)
api/scripts/generate_openapi.php (api)
api/scripts/generate_vapid_keys.php (api)
api/scripts/jobs_worker_run.php (api)
api/scripts/migration_status_check.php (api)
api/scripts/module.php (api)
api/scripts/recurring_processor.php (api)
api/scripts/reseed_digital_agency.php (api)
api/scripts/run_migrations.php (api)
api/scripts/scheduler.php (api)
api/scripts/seed_crm_implementation_tasks.php (api)
api/scripts/seed_full_demo_entities.php (api)
api/scripts/seed_knowledge.php (api)
api/scripts/seed_knowledge_base.php (api)
api/scripts/seed_knowledge_complete.php (api)
api/scripts/seed_knowledge_subspaces.php (api)
api/scripts/seed_knowledge_tags.php (api)
api/scripts/test_runner.php (api)
api/scripts/web_xss_static_check.php (api)
api/system/library/security/DatabaseRateLimiter.php (api)
api/system/library/service/AuthService.php (api)
api/system/library/service/AuthzService.php (api)
api/config/security.php (security)
api/controller/mcp/McpController.php (api)
api/scripts/ai_cron.php (api)
api/scripts/api_coverage_check.php (api)
api/scripts/client_data_quality_report.php (api)
api/scripts/cron_push.php (api)
api/scripts/db_orphan_checker.php (api)
api/scripts/docs_index_check.php (api)
api/scripts/generate_openapi.php (api)
api/scripts/generate_vapid_keys.php (api)
api/scripts/jobs_worker_run.php (api)
api/scripts/migration_status_check.php (api)
api/scripts/module.php (api)
api/scripts/recurring_processor.php (api)
api/scripts/reseed_digital_agency.php (api)
api/scripts/run_migrations.php (api)
api/scripts/scheduler.php (api)
api/scripts/seed_crm_implementation_tasks.php (api)
api/scripts/seed_full_demo_entities.php (api)
api/scripts/seed_knowledge.php (api)
api/scripts/seed_knowledge_base.php (api)
api/scripts/seed_knowledge_complete.php (api)
api/scripts/seed_knowledge_subspaces.php (api)
api/scripts/seed_knowledge_tags.php (api)
api/scripts/test_runner.php (api)
api/scripts/web_xss_static_check.php (api)
api/system/library/security/DatabaseRateLimiter.php (api)
api/system/library/service/AuthService.php (api)
api/system/library/service/AuthzService.php (api)