admin c80091c8d6 security: CAPA privilege escalation, CSV injection, AI rate-limit, prompt injection guard, open redirect, timing-safe cron secret, server-only admin client, notifications RLS

2026-07-12 17:33:58 +08:00

..

auth

fix: code-review findings — closed-incident embedding 503, hardening, dedup

2026-07-12 12:45:01 +08:00

claude

feat: API key settings page — store ANTHROPIC/VOYAGE keys in DB with admin UI

2026-07-11 17:46:40 +08:00

dashboard

feat: Phase 5 & 6 — usability, compliance hardening, analytics

2026-07-12 10:25:08 +08:00

i18n

feat: i18n — EN/MS/ZH translations with cookie-based locale switching, report form translated

2026-07-11 19:01:44 +08:00

incidents

feat: Phase 5 & 6 — usability, compliance hardening, analytics

2026-07-12 10:25:08 +08:00

notifications

feat: Phase 5 & 6 — usability, compliance hardening, analytics

2026-07-12 10:25:08 +08:00

offline

feat: Phase 5 & 6 — usability, compliance hardening, analytics

2026-07-12 10:25:08 +08:00

pdf

feat: JKKP 6/7 PDF generation via pdf-lib, download from incident detail

2026-07-11 15:24:18 +08:00

reports

fix: code-review findings — closed-incident embedding 503, hardening, dedup

2026-07-12 12:45:01 +08:00

supabase

security: CAPA privilege escalation, CSV injection, AI rate-limit, prompt injection guard, open redirect, timing-safe cron secret, server-only admin client, notifications RLS

2026-07-12 17:33:58 +08:00

csv.ts

security: CAPA privilege escalation, CSV injection, AI rate-limit, prompt injection guard, open redirect, timing-safe cron secret, server-only admin client, notifications RLS

2026-07-12 17:33:58 +08:00

settings.ts

feat: API key settings page — store ANTHROPIC/VOYAGE keys in DB with admin UI

2026-07-11 17:46:40 +08:00