Commit Graph
12 Commits
Author SHA1 Message Date
robbond fef9591b5d fix(security): protect representation blob deletion against CSRF 2026-11-09 09:31:41 +00:00
robbond 57e0c62940 fix(storage): constrain recursive blob deletion to resource folders 2026-11-07 11:12:08 +00:00
robbond bb50b17277 fix(ithc): correct server-side session retrieval for file APIs 2026-11-03 09:25:02 +00:00
robbond 0daeb783b9 Stage 3: enforce blob deletion ownership and add admin representation deletion
Also repairs two stale Phase 21 fixtures:
- Supplies a valid PDF to exercise the upload dependency-failure path.
- Injects getPersonalAccount into the representation-involvement VM fixture.
2026-10-26 14:39:22 +00:00
robbond 8e0131d1ce TASK22224: align delete file route hash guards and contracts 2026-03-23 17:31:25 +00:00
robbond 98184b65df TASK22102: slice6 blob crud and retrieval contract cleanup 2026-03-17 13:23:01 +00:00
robbond 846cba1645 TASK22019: phase 13 harden delete and involvement guards 2026-03-13 13:02:49 +00:00
robbond 52202f4e1c TASK22017: phase 8 hardening for sensitive hash-guarded APIs 2026-03-13 11:38:14 +00:00
robbond 61913f9f80 refactor phase 3a api-file chunk 2 targeted actions imports 2026-03-12 11:41:40 +00:00
robbond 2a6cd32452 console log tidying 2024-06-05 19:50:56 +01:00
robbond 7bba9ea362 delete reps on dash 2024-05-30 17:55:43 +01:00
robbond cf8ff7f45f wip for delete reps in view all 2024-05-30 15:43:33 +01:00