Commits

Back

Последние изменения из mirror GitHub. Здесь видны не только SHA, но и автор, дата, количество файлов и зоны риска.

Reset

Показаны 3484 commit'ов, страница 47 из 70.

Previous | Next

c203860

Security audit: 22 findings across 10 phases (read-only, code unchanged)

2026-07-12T00:50:27+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

89e38e9

Clear security audit report ready for fresh analysis

2026-07-12T00:41:10+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

89aaefe

Deploy: trigger deployment on main

2026-07-12T00:39:35+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

b6c7383

Merge branch 'security-fixes'

2026-07-12T00:39:34+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 0 | core 0 | module 0 | forbidden 0

Flags:

39af031

Security: add password length validation in password reset flow, mask internal error codes in API bootstrap

2026-07-12T00:39:00+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 4 | core 0 | module 0 | forbidden 0

Flags:

ff42b9c

Fresh security audit report: 22 findings across 10 audit phases

2026-07-12T00:35:19+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

2015b25

Clear security audit report ready for fresh analysis

2026-07-12T00:24:50+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

a4fd4c3

Deploy: trigger deployment on main

2026-07-12T00:20:29+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

6243025

Merge branch 'security-fixes'

2026-07-12T00:20:28+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 0 | core 0 | module 0 | forbidden 0

Flags:

b99935e

Security hardening: independent secret keys in non-prod, restrict CORS defaults in production, expand quarantine file extensions, server-side password validation, remove X-Powered-By header, and minimize robots.txt disclosure

2026-07-12T00:19:11+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 12 | core 0 | module 0 | forbidden 0

Flags:

fe32f36

Clear SECURITY-FIXES.md ready for fresh audit

2026-07-11T23:57:29+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

e162bff

Set project-controlled session save_path for installer shared hosting security

2026-07-11T23:53:41+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

d59d311

Deploy: trigger deployment on main

2026-07-11T23:49:01+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

2f9ec93

Deploy: trigger deployment with latest security fixes

2026-07-11T23:47:21+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

9e5f504

Security hardening: add PHP-level sensitive file blocking, web-layer rate limiting for auth endpoints, independent key generation in installer, Argon2id password hashing with BCRYPT fallback, and SameSite Strict config alignment

2026-07-11T23:45:27+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 8 | core 0 | module 0 | forbidden 0

Flags:

af48b83

update

2026-07-11T23:10:26+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

bf14212

Fix: Module package signature verification via HMAC-SHA256

2026-07-11T23:10:23+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

6de1eb4

update

2026-07-11T23:06:47+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

a0fd269

Fix: Mask IP addresses in audit, security and request logs for non-root users

2026-07-11T23:06:45+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

058de8e

update

2026-07-11T22:59:52+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

4ebe3df

Fix SEC-013: ORDER BY column validation to prevent SQL injection

2026-07-11T22:59:49+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

ebe7495

update

2026-07-11T22:53:43+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

fb41bcb

Fix SEC-009 (SameSite default changed to Strict) and SEC-014 (MCP api-endpoints restricted to settings.manage)

2026-07-11T22:53:40+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 4 | core 0 | module 0 | forbidden 0

Flags:

eb88463

update

2026-07-11T22:51:17+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

654a676

Fix P3-P5: SEC-015 (webhook URL warnings), SEC-017 (uploads .htaccess), SEC-018 (storage .htaccess)

2026-07-11T22:51:14+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 6 | core 0 | module 0 | forbidden 0

Flags:

95b2737

update

2026-07-11T22:47:19+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

43aa032

Fix P2: SEC-003 (lowered IP rate limit from 30 to 10), SEC-004 (team-based user list filtering), SEC-007 (MCP prompt injection warnings)

2026-07-11T22:47:16+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 6 | core 0 | module 0 | forbidden 0

Flags:

102ee50

update

2026-07-11T22:42:56+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

9e623e5

Fix P1: SEC-002 (removed password reset token from mail log), SEC-005 (revoke sessions on user delete), SEC-006 (URL validation in ModuleRepository)

2026-07-11T22:42:53+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 6 | core 0 | module 0 | forbidden 0

Flags:

832679d

update

2026-07-11T22:40:09+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

05b8556

Fix P0: SEC-001 (rate limiting moved to storage_api/cache/rate_limits) and SEC-016 (removed file-based AI key fallback)

2026-07-11T22:40:06+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 8 | core 0 | module 0 | forbidden 0

Flags:

2cff01b

update

2026-07-11T22:01:12+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

363e203

Fix P0: SEC-001 (installer 410 guard), SEC-002 (config PHP guards + nginx template)

2026-07-11T22:01:09+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 26 | core 0 | module 0 | forbidden 0

Flags:

fd0b70a

update

2026-07-11T21:56:41+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

4a071cc

Fix P1 security issues: SEC-003 (strip_tags XSS), SEC-004 (double extension quarantine), SEC-005 (CSP + header)

2026-07-11T21:56:37+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 8 | core 0 | module 0 | forbidden 0

Flags:

c581706

update

2026-07-10T21:25:08+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

bfbe61e

Retry AI requests when shared-hosting slots are busy

2026-07-10T21:25:03+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 4 | core 0 | module 0 | forbidden 0

Flags:

46d6b0b

update

2026-07-10T21:23:45+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

11e21f6

Protect shared hosting from concurrent AI requests

2026-07-10T21:23:41+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 8 | core 0 | module 0 | forbidden 0

Flags:

b61fb1a

update

2026-07-10T21:21:32+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

c7d5cd3

Fix F5-1: block direct web access to api/config/security.php

2026-07-10T21:21:16+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

1c056ed

update

2026-07-10T21:21:02+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

a425ff6

Separate trusted prompts in idea AI workflows

2026-07-10T21:20:57+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

8aeda89

update

2026-07-10T21:19:25+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 4 | core 0 | module 0 | forbidden 0

Flags:

4ad82bc

Fix F5-1: remove shebang causing fatal error on PHP-FPM (ai_cron, recurring_processor)

2026-07-10T21:19:20+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 4 | core 0 | module 0 | forbidden 0

Flags:

d9c6d39

update

2026-07-10T21:16:23+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

af4ef1a

Update deploy hash

2026-07-10T21:16:04+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

240a480

update

2026-07-10T21:11:03+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

4a069f0

Keep AI system prompts in trusted provider role

2026-07-10T21:10:58+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags:

cf7e877

update

2026-07-10T21:06:34+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files: 2 | core 0 | module 0 | forbidden 0

Flags: