admin 1879def32c security: P0 fixes — IDOR on incident/CAPA, CAPA non-owner write, timing-safe recheck cron, auth callback open redirect

2026-07-12 20:36:28 +08:00

..

(auth)/login

feat: add login page and auth callback route

2026-07-09 22:18:21 +08:00

(protected)

feat: sticky incident header with top-positioned action buttons (fix #5)

2026-07-12 16:44:42 +08:00

api

security: P0 fixes — IDOR on incident/CAPA, CAPA non-owner write, timing-safe recheck cron, auth callback open redirect

2026-07-12 20:36:28 +08:00

report

feat: PWA offline capture — IndexedDB queue, service worker cache, auto-sync on reconnect

2026-07-11 19:07:35 +08:00

favicon.ico

chore: scaffold Next.js 15 + Supabase clients + vitest

2026-07-09 21:33:59 +08:00

globals.css

chore: scaffold Next.js 15 + Supabase clients + vitest

2026-07-09 21:33:59 +08:00

layout.tsx

feat: i18n — EN/MS/ZH translations with cookie-based locale switching, report form translated

2026-07-11 19:01:44 +08:00

page.tsx

feat: Phase 1 foundation - incident components, storage, and migrations

2026-07-10 10:48:56 +08:00