admin 1879def32c security: P0 fixes — IDOR on incident/CAPA, CAPA non-owner write, timing-safe recheck cron, auth callback open redirect

2026-07-12 20:36:28 +08:00

..

admin

fix: code-review findings — closed-incident embedding 503, hardening, dedup

2026-07-12 12:45:01 +08:00

auth/callback

security: P0 fixes — IDOR on incident/CAPA, CAPA non-owner write, timing-safe recheck cron, auth callback open redirect

2026-07-12 20:36:28 +08:00

capa

security: P0 fixes — IDOR on incident/CAPA, CAPA non-owner write, timing-safe recheck cron, auth callback open redirect

2026-07-12 20:36:28 +08:00

cron

security: P0 fixes — IDOR on incident/CAPA, CAPA non-owner write, timing-safe recheck cron, auth callback open redirect

2026-07-12 20:36:28 +08:00

dashboard

security: CAPA privilege escalation, CSV injection, AI rate-limit, prompt injection guard, open redirect, timing-safe cron secret, server-only admin client, notifications RLS

2026-07-12 17:33:58 +08:00

incidents

security: P0 fixes — IDOR on incident/CAPA, CAPA non-owner write, timing-safe recheck cron, auth callback open redirect

2026-07-12 20:36:28 +08:00

notifications

feat: Phase 5 & 6 — usability, compliance hardening, analytics

2026-07-12 10:25:08 +08:00

reports/jkkp8

feat: Phase 5 & 6 — usability, compliance hardening, analytics

2026-07-12 10:25:08 +08:00

settings

feat: WhatsApp notifications — new incident alert and CAPA overdue escalation

2026-07-11 18:50:25 +08:00