Maciej Pienczyn
e718d96a7d
Some checks are pending
NordaBiz Tests / Unit & Integration Tests (push) Waiting to run
NordaBiz Tests / E2E Tests (Playwright) (push) Blocked by required conditions
NordaBiz Tests / Smoke Tests (Production) (push) Blocked by required conditions
NordaBiz Tests / Send Failure Notification (push) Blocked by required conditions
- HIGH: Fix SQL injection in ZOPK knowledge service (3 functions) — replace f-strings with parameterized queries - MEDIUM: Sanitize tsquery/LIKE input in SearchService to prevent injection - MEDIUM: Add @login_required + @role_required(ADMIN) to /health/full endpoint - MEDIUM: Add @role_required(ADMIN) to ZOPK knowledge search API - MEDIUM: Add bleach HTML sanitization on write for announcements, events, board proceedings (stored XSS via |safe) - MEDIUM: Remove partial API key from Gemini service logs - MEDIUM: Remove @csrf.exempt from chat endpoints, add X-CSRFToken headers in JS - MEDIUM: Add missing CSRF tokens to 3 POST forms (data_request, benefits_form, benefits_list) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| CLAUDE.md | ||
| routes_analytics.py | ||
| routes_announcements.py | ||
| routes_audits.py | ||
| routes_benefits.py | ||
| routes_companies.py | ||
| routes_insights.py | ||
| routes_krs_api.py | ||
| routes_membership.py | ||
| routes_model_comparison.py | ||
| routes_people.py | ||
| routes_security.py | ||
| routes_social.py | ||
| routes_status.py | ||
| routes_users_api.py | ||
| routes_zopk_dashboard.py | ||
| routes_zopk_knowledge.py | ||
| routes_zopk_news.py | ||
| routes_zopk_timeline.py | ||
| routes.py | ||