 Jeppe B
|
feccfada77
|
Restrict vehicle type product edits to superusers
|
2026-06-01 23:35:04 +02:00 |
|
|
Jeppe B
|
4127e66114
|
Merge pull request #89 from copenhagentruckwash/fix-unvalidated-attachment-download-links
Validate self-serve attachment download links
|
2026-06-01 23:34:45 +02:00 |
|
|
Jeppe B
|
b2a9b59399
|
Validate self-serve attachment download links
|
2026-06-01 23:34:34 +02:00 |
|
|
Jeppe B
|
6ffed9c2f2
|
Merge pull request #88 from copenhagentruckwash/fix-lane-toggle-guard-permission-issue
Fix lane toggle permission guards
|
2026-06-01 23:34:14 +02:00 |
|
|
Jeppe B
|
53e193d8d1
|
Fix lane toggle permission guards
|
2026-06-01 23:34:03 +02:00 |
|
|
Jeppe B
|
7835691bc9
|
Merge pull request #87 from copenhagentruckwash/fix-websocket-token-exposure-vulnerability
Secure edge gateway WebSocket session tokens
|
2026-06-01 23:33:44 +02:00 |
|
|
Jeppe B
|
91715541ec
|
Secure edge gateway websocket sessions
|
2026-06-01 23:33:34 +02:00 |
|
|
Jeppe B
|
e3f9e99129
|
Merge pull request #86 from copenhagentruckwash/fix-stored-xss-in-relay-options
Fix select option HTML escaping
|
2026-06-01 23:33:20 +02:00 |
|
|
Jeppe B
|
4634cbad89
|
Fix select option HTML escaping
|
2026-06-01 23:33:10 +02:00 |
|
|
Jeppe B
|
5db2a36da0
|
Merge pull request #85 from copenhagentruckwash/propose-fix-for-relay-failure-issue
Rollback wash start when relay activation fails
|
2026-06-01 22:53:44 +02:00 |
|
|
Jeppe B
|
cd7b273da4
|
Rollback wash start when relay activation fails
|
2026-06-01 22:53:34 +02:00 |
|
|
Jeppe B
|
cbbad1a6e2
|
Merge pull request #84 from copenhagentruckwash/fix-pos-url-order-reassignment-vulnerability
Prevent implicit POS order department changes
|
2026-06-01 22:44:24 +02:00 |
|
|
Jeppe B
|
9661d4efa7
|
Prevent implicit POS order department changes
|
2026-06-01 22:44:14 +02:00 |
|
|
Jeppe B
|
31762c23c5
|
Merge pull request #83 from copenhagentruckwash/fix-unescaped-order-delete-reasons
Fix protected order delete reason escaping
|
2026-06-01 22:43:55 +02:00 |
|
|
Jeppe B
|
c71a6b4d14
|
Fix protected order delete reason escaping
|
2026-06-01 22:43:45 +02:00 |
|
|
Jeppe B
|
e8ddb33f21
|
Merge pull request #82 from copenhagentruckwash/fix-vulnerability-in-edge-broker-config
Secure edge gateway broker configuration
|
2026-06-01 22:28:28 +02:00 |
|
|
Jeppe B
|
ea368d19bb
|
Secure edge gateway broker configuration
|
2026-06-01 22:28:18 +02:00 |
|
|
Jeppe B
|
7ab50b6290
|
Merge pull request #81 from copenhagentruckwash/fix-unredacted-broker-diagnostics-exposure
Redact edge gateway diagnostic secrets
|
2026-06-01 22:27:33 +02:00 |
|
|
Jeppe B
|
fd7cfbd3c3
|
Redact edge gateway diagnostics
|
2026-06-01 22:27:19 +02:00 |
|
|
Jeppe B
|
90725af10a
|
Merge pull request #80 from copenhagentruckwash/fix-ungated-destructive-actions-in-ui
Gate self-serve studio gateway actions and require confirmation for destructive operations
|
2026-06-01 22:26:58 +02:00 |
|
|
Jeppe B
|
d63a62a921
|
Gate self-serve gateway actions
|
2026-06-01 22:26:44 +02:00 |
|
|
Jeppe B
|
4bc5481941
|
Merge pull request #79 from copenhagentruckwash/propose-fix-for-deferred-start-relay-issue
Require successful machine relay activation before marking wash in progress
|
2026-06-01 22:15:16 +02:00 |
|
|
Jeppe B
|
9feede3b0d
|
Require machine relay activation before wash progress
|
2026-06-01 22:15:02 +02:00 |
|
|
Jeppe B
|
5aad9eda8d
|
Merge pull request #78 from copenhagentruckwash/fix-raw-edge-log-context-exposure
Redact edge gateway log context secrets
|
2026-06-01 22:13:42 +02:00 |
|
|
Jeppe B
|
91b15faba6
|
Redact edge gateway log context secrets
|
2026-06-01 22:13:32 +02:00 |
|
|
Jeppe B
|
98c1c61cbd
|
Merge pull request #77 from copenhagentruckwash/fix-active-wash-endpoint-information-leak
Scope active-wash restore to authenticated customer (my-active-wash)
|
2026-06-01 22:06:25 +02:00 |
|
|
Jeppe B
|
4463a5326a
|
Fix scoped active wash restoration
|
2026-06-01 22:06:14 +02:00 |
|
|
Jeppe B
|
bdb23513a4
|
Merge pull request #76 from copenhagentruckwash/propose-fix-for-security-vulnerability
Harden self-serve vehicle condition mutations
|
2026-06-01 22:05:37 +02:00 |
|
|
Jeppe B
|
ee40f16232
|
Harden self-serve vehicle condition mutations
|
2026-06-01 22:05:27 +02:00 |
|
|
Jeppe B
|
a76944b00c
|
Merge pull request #75 from copenhagentruckwash/fix-sessionstorage-vulnerability-in-invoicing-period
Secure privileged session caches
|
2026-06-01 21:52:53 +02:00 |
|
|
Jeppe B
|
cf074ff893
|
Secure privileged session caches
|
2026-06-01 21:52:42 +02:00 |
|
|
Jeppe B
|
712eb19db5
|
Merge pull request #74 from copenhagentruckwash/propose-fix-for-release-manager-token-leak
Restrict release manager control API origins
|
2026-06-01 21:52:20 +02:00 |
|
|
Jeppe B
|
de9bc9b170
|
Restrict release manager control API origins
|
2026-06-01 21:52:09 +02:00 |
|
|
Jeppe B
|
95e2404307
|
Merge pull request #73 from copenhagentruckwash/fix-unredacted-deployment-failures-exposure
Redact release deployment failure diagnostics
|
2026-06-01 21:27:42 +02:00 |
|
|
Jeppe B
|
2c01feb3be
|
Redact release deployment failure diagnostics
|
2026-06-01 21:27:28 +02:00 |
|
|
Jeppe B
|
f416e0d462
|
Merge pull request #72 from copenhagentruckwash/fix-telemetry-that-leaks-passwords
Redact serialized request bodies and omit failed-request bodies when capture is disabled
|
2026-06-01 21:26:45 +02:00 |
|
|
Jeppe B
|
7f1308c8ce
|
Redact release timeline failed request bodies
|
2026-06-01 21:26:32 +02:00 |
|
|
Jeppe B
|
fd8d45e437
|
Merge pull request #71 from copenhagentruckwash/fix-vulnerabilities-in-release-runtime-urls
Harden release runtime URL trust boundaries
|
2026-06-01 21:25:51 +02:00 |
|
|
copilot-swe-agent[bot]
|
20390342d5
|
Merge origin/master and resolve release timeline spec conflict
|
2026-06-01 19:21:12 +00:00 |
|
|
Jeppe B
|
c47bf229f0
|
Harden release runtime URL trust boundaries
|
2026-06-01 21:14:39 +02:00 |
|
|
Jeppe B
|
3616e197e1
|
Merge pull request #70 from copenhagentruckwash/propose-fix-for-isolated-stack-vulnerability
Prevent active isolated stack reuse during release deploys
|
2026-06-01 21:12:26 +02:00 |
|
|
Jeppe B
|
3d8544de21
|
Prevent isolated stack deployment reuse
|
2026-06-01 21:11:17 +02:00 |
|
|
Jeppe B
|
504abb7a15
|
Merge pull request #69 from copenhagentruckwash/fix-release-subject-autocomplete-exposure
Guard release assignment subject search
|
2026-06-01 21:11:02 +02:00 |
|
|
Jeppe B
|
37021533b9
|
Guard release assignment search by manage permission
|
2026-06-01 21:10:51 +02:00 |
|
|
Jeppe B
|
59eab84f03
|
Merge pull request #68 from copenhagentruckwash/fix-cross-origin-framing-vulnerability-in-nginx
Add anti-framing headers to Coolify Nginx frontend
|
2026-06-01 21:10:26 +02:00 |
|
|
Jeppe B
|
e67033711c
|
Add anti-framing headers to Coolify Nginx config
|
2026-06-01 21:10:14 +02:00 |
|
|
Jeppe B
|
85fd00f020
|
Merge pull request #67 from copenhagentruckwash/fix-metadata-exposure-for-low-privileged-users
Restrict release runtime metadata inspector
|
2026-06-01 21:09:54 +02:00 |
|
|
Jeppe B
|
4f064a1625
|
Restrict release runtime metadata inspector
|
2026-06-01 21:09:42 +02:00 |
|
|
Jeppe B
|
3bf7ada226
|
Merge pull request #66 from copenhagentruckwash/fix-tls-verification-in-dev-proxy
Secure Vite API proxy TLS by default
|
2026-06-01 21:09:15 +02:00 |
|
|
Jeppe B
|
3b90e17a1e
|
Secure Vite API proxy TLS by default
|
2026-06-01 21:09:05 +02:00 |
|