robbond
|
c49b491698
|
refactor: migrate myportal viewall account lookup to server helper
|
2026-11-06 11:58:01 +00:00 |
|
robbond
|
bf2e4a3254
|
refactor: migrate myportal index account lookup to server helper
|
2026-11-06 11:33:49 +00:00 |
|
robbond
|
4b552e9cdd
|
refactor: extract server-side CRM personal account lookup
|
2026-11-06 11:22:42 +00:00 |
|
robbond
|
b9be188d27
|
security: enforce CRM contact ownership and account field allowlist
|
2026-11-06 10:55:47 +00:00 |
|
robbond
|
71de8a2d14
|
refactor: extract server-side CRM contact update
|
2026-11-06 09:58:02 +00:00 |
|
robbond
|
ea5e90943d
|
chore: remove unused legacy CRM password validation
|
2026-11-06 09:26:10 +00:00 |
|
robbond
|
ddcef8f5ea
|
security: remove obsolete CRM login endpoint
|
2026-11-06 09:22:29 +00:00 |
|
robbond
|
f7479b72b9
|
security: remove obsolete CRM password update functionality
|
2026-11-06 09:14:54 +00:00 |
|
robbond
|
e1f8fb5c96
|
Revert "security: enforce authenticated CRM contact ownership"
This reverts commit e13700ab65.
|
2026-11-06 06:42:16 +00:00 |
|
robbond
|
e13700ab65
|
security: enforce authenticated CRM contact ownership
|
2026-11-06 06:36:53 +00:00 |
|
robbond
|
a0a1331a97
|
fix(security): retire obsolete CRM representation deletion endpoint
|
2026-11-05 17:18:30 +00:00 |
|
robbond
|
faf3aa3675
|
fix(security): enforce ownership on private draft case creation
|
2026-11-05 16:58:35 +00:00 |
|
robbond
|
9b0cb9adc8
|
fix(security): retire legacy direct CRM case creation endpoint
|
2026-11-05 16:37:10 +00:00 |
|
robbond
|
93bf7e174f
|
fix(security): enforce ownership on private draft PDF generation
|
2026-11-05 14:11:45 +00:00 |
|
robbond
|
8b045ab781
|
fix(security): enforce ownership across appeal completion
|
2026-11-05 13:28:43 +00:00 |
|
robbond
|
fc960f907f
|
fix(security): enforce ownership on private draft blob deletion
|
2026-11-05 13:04:09 +00:00 |
|
robbond
|
056dace563
|
fix(security): enforce ownership on draft blob listing proxy
|
2026-11-05 12:59:55 +00:00 |
|
robbond
|
9d6d3b9f71
|
fix(security): enforce ownership on appeal and representation blob proxies
|
2026-11-05 12:53:24 +00:00 |
|
robbond
|
0a115a8808
|
security: preserve representation history in watched-case upsert
|
2026-11-05 12:48:45 +00:00 |
|
robbond
|
706083b6f0
|
test: update endpoint contract fixtures and add test filtering
|
2026-11-05 10:25:59 +00:00 |
|
robbond
|
431c45ba2b
|
security: enforce CRM watched-case deletion ownership
|
2026-11-05 10:24:52 +00:00 |
|
robbond
|
eeb4a1f441
|
fix: restore watched-case deletion through subscriptions facade
|
2026-11-05 10:02:30 +00:00 |
|
robbond
|
569faa77e5
|
fix(security): isolate NextAuth email provider from Nodemailer
|
2026-11-04 11:26:01 +00:00 |
|
robbond
|
d9f0c0797d
|
fix(security): strip video embeds from rich text linkification
|
2026-11-04 10:51:56 +00:00 |
|
robbond
|
500a30e95b
|
chore: remove obsolete static appeal form definitions
|
2026-11-04 10:04:28 +00:00 |
|
robbond
|
ebe8cab03f
|
fix(deps): migrate ESLint tooling for Next.js 16
|
2026-11-04 10:01:40 +00:00 |
|
robbond
|
16a206ae0f
|
fix(security): remove obsolete Swagger documentation endpoint
|
2026-11-04 09:17:23 +00:00 |
|
robbond
|
b170f65210
|
fix(deps): upgrade webpack to 5.112.2
|
2026-11-04 09:09:17 +00:00 |
|
robbond
|
945f5d4f5d
|
fix(deps): remove unused server-side Application Insights SDK
|
2026-11-04 08:52:33 +00:00 |
|
robbond
|
07ea9c5451
|
fix(deps): upgrade Azure Identity and remove vulnerable uuid dependency
|
2026-11-04 07:50:07 +00:00 |
|
robbond
|
ddf5aba9f5
|
fix(deps): upgrade direct uuid dependency to 11.1.1
|
2026-11-04 07:47:18 +00:00 |
|
robbond
|
4f1bde2440
|
fix(deps): upgrade file-type to 22.3.0
|
2026-11-04 07:45:29 +00:00 |
|
robbond
|
3a75c69b3a
|
fix(deps): remove unused react-quill dependency
|
2026-11-04 07:36:12 +00:00 |
|
robbond
|
3f91a3e095
|
fix(security): replace nookies with patched cookie utility
|
2026-11-04 06:54:36 +00:00 |
|
robbond
|
cd0c690454
|
fix(deps): update react-cookie-consent to address js-cookie vulnerability
|
2026-11-04 06:25:47 +00:00 |
|
robbond
|
e46b00b4aa
|
fix(deps): update immutable to patched release
|
2026-11-04 06:19:37 +00:00 |
|
robbond
|
814d23d3f5
|
fix(deps): update ajv to patched release
|
2026-11-04 06:06:25 +00:00 |
|
robbond
|
c6e6f923a8
|
fix(deps): remove unused moment dependency
|
2026-11-04 06:04:13 +00:00 |
|
robbond
|
ba639da696
|
fix(deps): update fflate to patched release
|
2026-11-04 06:01:07 +00:00 |
|
robbond
|
e5bb0477f4
|
fix(deps): update browserslist to patched release
|
2026-11-03 18:06:30 +00:00 |
|
robbond
|
38ade33bf3
|
fix(deps): update nevware21 ts-utils to patched release
|
2026-11-03 18:04:28 +00:00 |
|
robbond
|
14e8ad82d1
|
fix(deps): remove vulnerable serialize-javascript dependency
|
2026-11-03 17:57:16 +00:00 |
|
robbond
|
7fc6acea5c
|
fix(deps): update source-map-js to patched release
|
2026-11-03 17:11:23 +00:00 |
|
robbond
|
ba83555771
|
fix(deps): update picomatch to patched releases
|
2026-11-03 17:09:07 +00:00 |
|
robbond
|
99073e2146
|
fix(deps): update brace-expansion to patched releases
|
2026-11-03 17:07:28 +00:00 |
|
robbond
|
1c2ae06793
|
fix(deps): update flatted to patched release
|
2026-11-03 17:05:15 +00:00 |
|
robbond
|
4c227da77a
|
fix(deps): update js-yaml to patched release
|
2026-11-03 17:03:29 +00:00 |
|
robbond
|
ef9a630e5e
|
fix(deps): update jws to patched releases
|
2026-11-03 16:44:56 +00:00 |
|
robbond
|
7c8b7025a1
|
fix(deps): update validator to patched release
|
2026-11-03 16:37:36 +00:00 |
|
robbond
|
40d5629ac3
|
fix(deps): update lodash and lodash-es to patched releases
|
2026-11-03 16:36:01 +00:00 |
|