3 Commits

Include renames

Author	SHA1	Message	Date
adminandClaude Sonnet 4.6	614c792225	fix(security): VULN-009 magic-byte MIME validation + UTC date fix ... - uploadEvidenceFile: validate file type via file-type magic bytes, reject client-supplied MIME, derive extension from detected type, upload ArrayBuffer - getEscalationThreshold: use setUTCHours instead of setHours so date-only ISO strings (always UTC midnight) compare consistently in any timezone - Tests: mock file-type, update upload expectation to ArrayBuffer Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01CPf5Rc8QPx6V8KLEEgfKEQ	2026-07-13 06:37:59 +08:00
admin	a40a0f7c59	fix: signed URLs for private bucket, 10MB server-side limit, safe auth destructuring	2026-07-10 12:00:52 +08:00
admin	8a9758c8a6	feat: Phase 1 foundation - incident components, storage, and migrations	2026-07-10 10:48:56 +08:00