Commit Graph
2190 Commits
Author SHA1 Message Date
robbond c49b491698 refactor: migrate myportal viewall account lookup to server helper 2026-11-06 11:58:01 +00:00
robbond bf2e4a3254 refactor: migrate myportal index account lookup to server helper 2026-11-06 11:33:49 +00:00
robbond 4b552e9cdd refactor: extract server-side CRM personal account lookup 2026-11-06 11:22:42 +00:00
robbond b9be188d27 security: enforce CRM contact ownership and account field allowlist 2026-11-06 10:55:47 +00:00
robbond 71de8a2d14 refactor: extract server-side CRM contact update 2026-11-06 09:58:02 +00:00
robbond ea5e90943d chore: remove unused legacy CRM password validation 2026-11-06 09:26:10 +00:00
robbond ddcef8f5ea security: remove obsolete CRM login endpoint 2026-11-06 09:22:29 +00:00
robbond f7479b72b9 security: remove obsolete CRM password update functionality 2026-11-06 09:14:54 +00:00
robbond e1f8fb5c96 Revert "security: enforce authenticated CRM contact ownership"
This reverts commit e13700ab65.
2026-11-06 06:42:16 +00:00
robbond e13700ab65 security: enforce authenticated CRM contact ownership 2026-11-06 06:36:53 +00:00
robbond a0a1331a97 fix(security): retire obsolete CRM representation deletion endpoint 2026-11-05 17:18:30 +00:00
robbond faf3aa3675 fix(security): enforce ownership on private draft case creation 2026-11-05 16:58:35 +00:00
robbond 9b0cb9adc8 fix(security): retire legacy direct CRM case creation endpoint 2026-11-05 16:37:10 +00:00
robbond 93bf7e174f fix(security): enforce ownership on private draft PDF generation 2026-11-05 14:11:45 +00:00
robbond 8b045ab781 fix(security): enforce ownership across appeal completion 2026-11-05 13:28:43 +00:00
robbond fc960f907f fix(security): enforce ownership on private draft blob deletion 2026-11-05 13:04:09 +00:00
robbond 056dace563 fix(security): enforce ownership on draft blob listing proxy 2026-11-05 12:59:55 +00:00
robbond 9d6d3b9f71 fix(security): enforce ownership on appeal and representation blob proxies 2026-11-05 12:53:24 +00:00
robbond 0a115a8808 security: preserve representation history in watched-case upsert 2026-11-05 12:48:45 +00:00
robbond 706083b6f0 test: update endpoint contract fixtures and add test filtering 2026-11-05 10:25:59 +00:00
robbond 431c45ba2b security: enforce CRM watched-case deletion ownership 2026-11-05 10:24:52 +00:00
robbond eeb4a1f441 fix: restore watched-case deletion through subscriptions facade 2026-11-05 10:02:30 +00:00
robbond 569faa77e5 fix(security): isolate NextAuth email provider from Nodemailer 2026-11-04 11:26:01 +00:00
robbond d9f0c0797d fix(security): strip video embeds from rich text linkification 2026-11-04 10:51:56 +00:00
robbond 500a30e95b chore: remove obsolete static appeal form definitions 2026-11-04 10:04:28 +00:00
robbond ebe8cab03f fix(deps): migrate ESLint tooling for Next.js 16 2026-11-04 10:01:40 +00:00
robbond 16a206ae0f fix(security): remove obsolete Swagger documentation endpoint 2026-11-04 09:17:23 +00:00
robbond b170f65210 fix(deps): upgrade webpack to 5.112.2 2026-11-04 09:09:17 +00:00
robbond 945f5d4f5d fix(deps): remove unused server-side Application Insights SDK 2026-11-04 08:52:33 +00:00
robbond 07ea9c5451 fix(deps): upgrade Azure Identity and remove vulnerable uuid dependency 2026-11-04 07:50:07 +00:00
robbond ddf5aba9f5 fix(deps): upgrade direct uuid dependency to 11.1.1 2026-11-04 07:47:18 +00:00
robbond 4f1bde2440 fix(deps): upgrade file-type to 22.3.0 2026-11-04 07:45:29 +00:00
robbond 3a75c69b3a fix(deps): remove unused react-quill dependency 2026-11-04 07:36:12 +00:00
robbond 3f91a3e095 fix(security): replace nookies with patched cookie utility 2026-11-04 06:54:36 +00:00
robbond cd0c690454 fix(deps): update react-cookie-consent to address js-cookie vulnerability 2026-11-04 06:25:47 +00:00
robbond e46b00b4aa fix(deps): update immutable to patched release 2026-11-04 06:19:37 +00:00
robbond 814d23d3f5 fix(deps): update ajv to patched release 2026-11-04 06:06:25 +00:00
robbond c6e6f923a8 fix(deps): remove unused moment dependency 2026-11-04 06:04:13 +00:00
robbond ba639da696 fix(deps): update fflate to patched release 2026-11-04 06:01:07 +00:00
robbond e5bb0477f4 fix(deps): update browserslist to patched release 2026-11-03 18:06:30 +00:00
robbond 38ade33bf3 fix(deps): update nevware21 ts-utils to patched release 2026-11-03 18:04:28 +00:00
robbond 14e8ad82d1 fix(deps): remove vulnerable serialize-javascript dependency 2026-11-03 17:57:16 +00:00
robbond 7fc6acea5c fix(deps): update source-map-js to patched release 2026-11-03 17:11:23 +00:00
robbond ba83555771 fix(deps): update picomatch to patched releases 2026-11-03 17:09:07 +00:00
robbond 99073e2146 fix(deps): update brace-expansion to patched releases 2026-11-03 17:07:28 +00:00
robbond 1c2ae06793 fix(deps): update flatted to patched release 2026-11-03 17:05:15 +00:00
robbond 4c227da77a fix(deps): update js-yaml to patched release 2026-11-03 17:03:29 +00:00
robbond ef9a630e5e fix(deps): update jws to patched releases 2026-11-03 16:44:56 +00:00
robbond 7c8b7025a1 fix(deps): update validator to patched release 2026-11-03 16:37:36 +00:00
robbond 40d5629ac3 fix(deps): update lodash and lodash-es to patched releases 2026-11-03 16:36:01 +00:00