 Jeppe B
|
76744fd6c3
|
Limit dynamic image Redis caching to default variant
|
2026-06-02 00:00:04 +02:00 |
|
|
Jeppe B
|
f5c1a34c29
|
Merge pull request #256 from copenhagentruckwash/fix-idor-vulnerability-in-economic-v2-endpoints
Prevent IDOR on Economic V2 collected-invoice endpoints
|
2026-06-01 23:58:41 +02:00 |
|
|
Jeppe B
|
22ad96bc8e
|
Fix economic v2 invoice endpoint authorization scope
|
2026-06-01 23:58:30 +02:00 |
|
|
Jeppe B
|
8a749cffa3
|
Fix system search department scoping for generic entities
|
2026-06-01 23:58:03 +02:00 |
|
|
Jeppe B
|
cf5cf8d5eb
|
Merge pull request #254 from copenhagentruckwash/fix-user-search-exposure-vulnerability
Restrict `users` system-search access to prevent PII leakage
|
2026-06-01 23:57:33 +02:00 |
|
|
Jeppe B
|
eb14b7039b
|
Restrict users system search permissions
|
2026-06-01 23:57:23 +02:00 |
|
|
Jeppe B
|
f09b1263c1
|
Merge pull request #253 from copenhagentruckwash/fix-stripe-payment-intent-reuse-issue
Validate Stripe payment intent amount before reuse
|
2026-06-01 23:54:32 +02:00 |
|
|
Jeppe B
|
9ec8499d55
|
Validate Stripe payment intent amount before reuse
|
2026-06-01 23:54:04 +02:00 |
|
|
Jeppe B
|
8d40cd6f9a
|
Merge pull request #252 from copenhagentruckwash/fix-complaint-endpoints-department-access-check
Require department access for department daily report complaint routes
|
2026-06-01 23:53:45 +02:00 |
|
|
Jeppe B
|
ccffad3c7c
|
Fix complaint department authorization
|
2026-06-01 23:53:36 +02:00 |
|
|
Jeppe B
|
4697c6b272
|
Merge pull request #251 from copenhagentruckwash/fix-subuser-management-permission-checks
Enforce own-scope subuser permissions for classic users in managed customer scope
|
2026-06-01 23:53:06 +02:00 |
|
|
Jeppe B
|
45e17e196c
|
Fix subuser management permission scope
|
2026-06-01 23:52:57 +02:00 |
|
|
Jeppe B
|
dcc81cbdc7
|
Merge pull request #250 from copenhagentruckwash/propose-fix-for-privilege-boundary-regression
Restrict studio simulation to config-version view and prevent auto-creating drafts
|
2026-06-01 23:52:28 +02:00 |
|
|
Jeppe B
|
c5cb0a3bfe
|
Fix studio simulation draft access
|
2026-06-01 23:52:18 +02:00 |
|
|
Jeppe B
|
465f3ed027
|
Merge pull request #249 from copenhagentruckwash/fix-edge-agent-vulnerability-for-unsigned-artifacts
Require checksums for edge agent updates
|
2026-06-01 23:50:05 +02:00 |
|
|
Jeppe B
|
80ff01f04e
|
Require checksums for edge agent updates
|
2026-06-01 23:49:56 +02:00 |
|
|
Jeppe B
|
f6e4d851d3
|
Merge pull request #248 from copenhagentruckwash/fix-authenticated-ssrf-in-broker-diagnostics
Prevent SSRF in broker diagnostics by ignoring caller URLs and redacting probe output
|
2026-06-01 23:49:24 +02:00 |
|
|
Jeppe B
|
cd4e3faea3
|
Fix broker diagnostics SSRF
|
2026-06-01 23:49:10 +02:00 |
|
|
Jeppe B
|
4cb9e68b33
|
Merge pull request #247 from copenhagentruckwash/fix-information-disclosure-in-websocket-upgrades
Sanitize websocket upgrade error responses
|
2026-06-01 23:47:09 +02:00 |
|
|
Jeppe B
|
0e7e79d205
|
Sanitize websocket upgrade errors
|
2026-06-01 23:46:59 +02:00 |
|
|
Jeppe B
|
a9ca7b41a7
|
Merge pull request #246 from copenhagentruckwash/fix-unbounded-relay-timer-vulnerability
Cap self-serve gate relay timers
|
2026-06-01 23:45:39 +02:00 |
|
|
Jeppe B
|
3b3ed31bb7
|
Cap self-serve gate relay timers
|
2026-06-01 23:45:20 +02:00 |
|
|
Jeppe B
|
cf9d5875ef
|
Merge pull request #242 from copenhagentruckwash/fix-vulnerability-with-self-hosted-runners
Run PR code quality workflow on GitHub-hosted runner
|
2026-06-01 23:44:29 +02:00 |
|
|
Jeppe B
|
4730eebdb4
|
Merge pull request #245 from copenhagentruckwash/fix-internal-ip-address-leakage
Stop exposing relay local IPs by default
|
2026-06-01 23:44:05 +02:00 |
|
|
Jeppe B
|
b25ce9cb11
|
Stop exposing relay local IPs by default
|
2026-06-01 23:43:53 +02:00 |
|
|
Jeppe B
|
fdb98f1399
|
Merge pull request #244 from copenhagentruckwash/fix-unauthenticated-relay-control-vulnerability
Require authorization for LAN worker relay endpoints
|
2026-06-01 23:43:34 +02:00 |
|
|
Jeppe B
|
1dc758a3a3
|
Require authorization for LAN worker relay endpoints
|
2026-06-01 23:43:23 +02:00 |
|
|
Jeppe B
|
032ce93d5e
|
Merge pull request #243 from copenhagentruckwash/fix-hardcoded-service-credentials-in-docker-config
Secure edge gateway service credentials
|
2026-06-01 23:42:47 +02:00 |
|
|
Jeppe B
|
f8ced3b8f2
|
Secure edge gateway service credentials
|
2026-06-01 23:42:34 +02:00 |
|
|
copilot-swe-agent[bot]
|
a81e239de8
|
Merge master into branch and resolve code_quality.yml comment conflict
|
2026-06-01 21:42:21 +00:00 |
|
|
Jeppe B
|
9ea5a62577
|
Merge pull request #238 from copenhagentruckwash/fix-cache-only-lookup-for-invoice-flags
Normalize invoice-period cache keys and restore DB fallbacks for missing Redis entries
|
2026-06-01 23:41:26 +02:00 |
|
|
Jeppe B
|
af89a246db
|
Run PR code quality workflow on GitHub-hosted runner
|
2026-06-01 23:38:32 +02:00 |
|
|
Jeppe B
|
20c1973565
|
Merge pull request #241 from copenhagentruckwash/fix-telemetry-path-error-message-leak
Sanitize telemetry ingestion errors
|
2026-06-01 23:37:59 +02:00 |
|
|
copilot-swe-agent[bot]
|
3555904423
|
Merge origin/master and resolve invoice_period_flag_service conflict
|
2026-06-01 21:37:53 +00:00 |
|
|
Jeppe B
|
a2dda5ea5b
|
Sanitize telemetry ingestion errors
|
2026-06-01 23:37:48 +02:00 |
|
|
Jeppe B
|
ce29cf9ccb
|
Merge pull request #240 from copenhagentruckwash/propose-fix-for-ci-vulnerability
Secure Qodana pull request workflow
|
2026-06-01 23:36:53 +02:00 |
|
|
Jeppe B
|
e7481297c8
|
Secure Qodana PR workflow runner
|
2026-06-01 23:36:44 +02:00 |
|
|
Jeppe B
|
e3b38519fb
|
Merge pull request #239 from copenhagentruckwash/propose-fix-for-qodana-vulnerability
Skip Qodana when cloud token is missing
|
2026-06-01 23:31:34 +02:00 |
|
|
Jeppe B
|
d244c000c3
|
Skip Qodana when cloud token is missing
|
2026-06-01 23:31:24 +02:00 |
|
|
Jeppe B
|
dcd57c7092
|
Merge pull request #221 from copenhagentruckwash/fix-system-search-associations-vulnerability
Prevent association expansion from bypassing own-only access
|
2026-06-01 23:31:00 +02:00 |
|
|
Jeppe B
|
0a7e58fc01
|
Merge pull request #222 from copenhagentruckwash/fix-hardcoded-bearer-tokens-in-tests
Remove hardcoded API credentials and resolve merge conflict in test HTTP file
|
2026-06-01 23:29:28 +02:00 |
|
|
Jeppe B
|
bd7deaeded
|
Fix invoice period flag cache fallbacks
|
2026-06-01 23:29:05 +02:00 |
|
|
Jeppe B
|
07a3ef6418
|
Merge pull request #237 from copenhagentruckwash/fix-concurrent-access-vulnerability-in-start-command
Add per-lane START lock to prevent TOCTOU relay replay on wash start
|
2026-06-01 23:28:45 +02:00 |
|
|
Jeppe B
|
bffed6f5f3
|
Fix self-serve start relay race
|
2026-06-01 23:28:36 +02:00 |
|
|
Jeppe B
|
bfec31f94b
|
Merge pull request #236 from copenhagentruckwash/fix-task-attachment-link-vulnerability
Enforce lane department authorization for self-serve eligibility
|
2026-06-01 23:28:05 +02:00 |
|
|
Jeppe B
|
2123835aae
|
Fix self-serve eligibility lane authorization
|
2026-06-01 23:27:56 +02:00 |
|
|
Jeppe B
|
11f06e8f53
|
Merge pull request #235 from copenhagentruckwash/investigate-self-serve-path-projection-dos-vulnerability
Clamp self-serve path projection limits
|
2026-06-01 23:27:33 +02:00 |
|
|
Jeppe B
|
6712368323
|
Clamp self-serve path projection limits
|
2026-06-01 23:27:22 +02:00 |
|
|
Jeppe B
|
99fe659dbc
|
Merge pull request #234 from copenhagentruckwash/propose-fix-for-archived-department-vulnerability
Fix department archived filter smuggling
|
2026-06-01 23:27:06 +02:00 |
|
|
Jeppe B
|
357cfda46e
|
Fix department archived filter smuggling
|
2026-06-01 23:26:57 +02:00 |
|