robbond/pedwfrontend
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • 9dfa2e8792 Merged PR 2677: Feature/ithc mitigation final SIPS-Development Robert Bond 2026-11-10 11:04:13 +00:00
  • 220d7826b2 Merged PR 2675: Feature/ithc mitigation Robert Bond 2026-11-10 10:39:40 +00:00
  • 73419aa598 fix(security): prevent caching of sensitive API responses robbond 2026-11-09 16:38:19 +00:00
  • 63c56da143 fix(security): disable legacy XSS browser filter robbond 2026-11-09 15:56:30 +00:00
  • ff84e9ea0f fix(security): use server-configured PET notification recipient robbond 2026-11-09 14:04:31 +00:00
  • f4f8075af3 fix(security): harden Contact Us PET notifications robbond 2026-11-09 13:41:31 +00:00
  • 3c0a9ef721 fix(security): harden Contact Us sender confirmations robbond 2026-11-09 13:06:22 +00:00
  • b821dc2092 fix(security): append Contact Us CRM activity reminder robbond 2026-11-09 12:07:08 +00:00
  • b15ac5e664 fix(security): harden Contact Us CRM task endpoint robbond 2026-11-09 11:17:17 +00:00
  • fef9591b5d fix(security): protect representation blob deletion against CSRF robbond 2026-11-09 09:31:41 +00:00
  • 4eba824ac2 fix(security): protect case blob deletion against CSRF robbond 2026-11-09 07:56:59 +00:00
  • 12b0e5eff0 fix(storage): await recursive blob deletions and propagate failures robbond 2026-11-07 11:17:48 +00:00
  • 57e0c62940 fix(storage): constrain recursive blob deletion to resource folders robbond 2026-11-07 11:12:08 +00:00
  • bb8c5047c8 Merge ITHC recovery into mitigation baseline robbond 2026-11-07 07:55:52 +00:00
  • 1377aebc89 fix: enforce representation blob ownership and secure SSR access robbond 2026-11-06 17:05:40 +00:00
  • 946d361a67 test: cover ITHC cross-user blob deletion protection robbond 2026-11-06 13:02:49 +00:00
  • c49b491698 refactor: migrate myportal viewall account lookup to server helper robbond 2026-11-06 11:58:01 +00:00
  • bf2e4a3254 refactor: migrate myportal index account lookup to server helper robbond 2026-11-06 11:33:49 +00:00
  • 4b552e9cdd refactor: extract server-side CRM personal account lookup robbond 2026-11-06 11:22:42 +00:00
  • b9be188d27 security: enforce CRM contact ownership and account field allowlist robbond 2026-11-06 10:55:47 +00:00
  • 71de8a2d14 refactor: extract server-side CRM contact update robbond 2026-11-06 09:58:02 +00:00
  • ea5e90943d chore: remove unused legacy CRM password validation robbond 2026-11-06 09:26:10 +00:00
  • ddcef8f5ea security: remove obsolete CRM login endpoint robbond 2026-11-06 09:22:29 +00:00
  • f7479b72b9 security: remove obsolete CRM password update functionality robbond 2026-11-06 09:14:54 +00:00
  • e1f8fb5c96 Revert "security: enforce authenticated CRM contact ownership" robbond 2026-11-06 06:42:16 +00:00
  • e13700ab65 security: enforce authenticated CRM contact ownership robbond 2026-11-05 06:49:00 +00:00
  • a0a1331a97 fix(security): retire obsolete CRM representation deletion endpoint robbond 2026-11-05 17:18:30 +00:00
  • faf3aa3675 fix(security): enforce ownership on private draft case creation robbond 2026-11-04 16:07:23 +00:00
  • 9b0cb9adc8 fix(security): retire legacy direct CRM case creation endpoint robbond 2026-11-05 16:37:10 +00:00
  • 93bf7e174f fix(security): enforce ownership on private draft PDF generation robbond 2026-11-05 14:11:45 +00:00
  • 8b045ab781 fix(security): enforce ownership across appeal completion robbond 2026-11-04 14:20:11 +00:00
  • fc960f907f fix(security): enforce ownership on private draft blob deletion robbond 2026-11-04 14:01:50 +00:00
  • 056dace563 fix(security): enforce ownership on draft blob listing proxy robbond 2026-11-04 13:45:56 +00:00
  • 9d6d3b9f71 fix(security): enforce ownership on appeal and representation blob proxies robbond 2026-11-04 13:23:51 +00:00
  • 0a115a8808 security: preserve representation history in watched-case upsert robbond 2026-11-05 12:48:45 +00:00
  • 706083b6f0 test: update endpoint contract fixtures and add test filtering robbond 2026-11-05 10:25:08 +00:00
  • 431c45ba2b security: enforce CRM watched-case deletion ownership robbond 2026-11-05 10:24:52 +00:00
  • eeb4a1f441 fix: restore watched-case deletion through subscriptions facade robbond 2026-11-05 10:02:30 +00:00
  • 2badf2e272 security: enforce authenticated CRM contact ownership robbond 2026-11-05 06:49:00 +00:00
  • 601668a675 security: enforce CRM watched-case deletion ownership robbond 2026-11-04 17:44:05 +00:00
  • d0ce82c69f security: retire obsolete CRM representation deletion endpoint robbond 2026-11-04 17:10:23 +00:00
  • 5729625229 fix(security): enforce ownership on private draft case creation robbond 2026-11-04 16:07:23 +00:00
  • b59959fb83 fix(security): enforce ownership on private draft PDF generation robbond 2026-11-04 15:36:52 +00:00
  • 4829c49c7b fix(security): enforce ownership across appeal completion robbond 2026-11-04 14:20:11 +00:00
  • f8245861b7 fix(security): enforce ownership on private draft blob deletion robbond 2026-11-04 14:01:50 +00:00
  • 9d8678f52a fix(security): enforce ownership on draft blob listing proxy robbond 2026-11-04 13:45:56 +00:00
  • 7649ad3615 fix(security): enforce ownership on appeal and representation blob proxies robbond 2026-11-04 13:23:51 +00:00
  • 569faa77e5 fix(security): isolate NextAuth email provider from Nodemailer robbond 2026-11-04 11:26:01 +00:00
  • d9f0c0797d fix(security): strip video embeds from rich text linkification robbond 2026-11-04 10:51:56 +00:00
  • 500a30e95b chore: remove obsolete static appeal form definitions robbond 2026-11-04 10:04:28 +00:00
  • ebe8cab03f fix(deps): migrate ESLint tooling for Next.js 16 robbond 2026-11-04 10:01:40 +00:00
  • 16a206ae0f fix(security): remove obsolete Swagger documentation endpoint robbond 2026-11-04 09:17:23 +00:00
  • b170f65210 fix(deps): upgrade webpack to 5.112.2 robbond 2026-11-04 09:09:17 +00:00
  • 945f5d4f5d fix(deps): remove unused server-side Application Insights SDK robbond 2026-11-04 08:52:33 +00:00
  • 07ea9c5451 fix(deps): upgrade Azure Identity and remove vulnerable uuid dependency robbond 2026-11-04 07:50:07 +00:00
  • ddf5aba9f5 fix(deps): upgrade direct uuid dependency to 11.1.1 robbond 2026-11-04 07:47:18 +00:00
  • 4f1bde2440 fix(deps): upgrade file-type to 22.3.0 robbond 2026-11-04 07:45:29 +00:00
  • 3a75c69b3a fix(deps): remove unused react-quill dependency robbond 2026-11-04 07:36:12 +00:00
  • 3f91a3e095 fix(security): replace nookies with patched cookie utility robbond 2026-11-04 06:54:36 +00:00
  • cd0c690454 fix(deps): update react-cookie-consent to address js-cookie vulnerability robbond 2026-11-04 06:25:47 +00:00
  • e46b00b4aa fix(deps): update immutable to patched release robbond 2026-11-04 06:19:37 +00:00
  • 814d23d3f5 fix(deps): update ajv to patched release robbond 2026-11-04 06:06:25 +00:00
  • c6e6f923a8 fix(deps): remove unused moment dependency robbond 2026-11-04 06:04:13 +00:00
  • ba639da696 fix(deps): update fflate to patched release robbond 2026-11-04 06:01:07 +00:00
  • e5bb0477f4 fix(deps): update browserslist to patched release robbond 2026-11-03 18:06:30 +00:00
  • 38ade33bf3 fix(deps): update nevware21 ts-utils to patched release robbond 2026-11-03 18:04:28 +00:00
  • 14e8ad82d1 fix(deps): remove vulnerable serialize-javascript dependency robbond 2026-11-03 17:57:16 +00:00
  • 7fc6acea5c fix(deps): update source-map-js to patched release robbond 2026-11-03 17:11:23 +00:00
  • ba83555771 fix(deps): update picomatch to patched releases robbond 2026-11-03 17:09:07 +00:00
  • 99073e2146 fix(deps): update brace-expansion to patched releases robbond 2026-11-03 17:07:28 +00:00
  • 1c2ae06793 fix(deps): update flatted to patched release robbond 2026-11-03 17:05:15 +00:00
  • 4c227da77a fix(deps): update js-yaml to patched release robbond 2026-11-03 17:03:29 +00:00
  • ef9a630e5e fix(deps): update jws to patched releases robbond 2026-11-03 16:44:56 +00:00
  • 7c8b7025a1 fix(deps): update validator to patched release robbond 2026-11-03 16:37:36 +00:00
  • 40d5629ac3 fix(deps): update lodash and lodash-es to patched releases robbond 2026-11-03 16:36:01 +00:00
  • 127b7c26d4 fix(deps): update multiparty to patched release robbond 2026-11-03 16:25:58 +00:00
  • 1d01cc4bdb fix(deps): remove unused legacy jsonpath dependency robbond 2026-11-03 16:22:22 +00:00
  • be8ee5cfdb fix(deps): remove unused compression dependency robbond 2026-11-03 16:14:05 +00:00
  • 898e1762bb fix(deps): update xmldom to patched release robbond 2026-11-03 16:09:56 +00:00
  • 933858ed6c fix(deps): update Azure XML parser dependencies robbond 2026-11-03 16:05:15 +00:00
  • ea92d85e6a fix(deps): remove unused react-pdf dependency robbond 2026-11-03 15:52:54 +00:00
  • 37b8dc7916 fix(deps): remove unused Swagger UI dependencies robbond 2026-11-03 15:43:24 +00:00
  • 298fa25c9b fix(deps): update Express and proxy-addr robbond 2026-11-03 14:32:28 +00:00
  • 40092a8915 fix(deps): update axios and transitive dependencies robbond 2026-11-03 14:26:46 +00:00
  • 441c9376f4 fix(deps): remove unused vulnerable Auth.js Prisma adapter robbond 2026-11-03 13:56:56 +00:00
  • cb24e02ce7 fix(styles): replace deprecated step-related Sass division robbond 2026-11-03 13:27:35 +00:00
  • adcf017d49 fix(styles): replace deprecated step-nav Sass division robbond 2026-11-03 13:15:47 +00:00
  • 697b1adc5f chore: revert vscode debug robbond 2026-11-03 12:59:21 +00:00
  • 41151d987f chore: update vscode debug launch.json robbond 2026-11-03 12:56:51 +00:00
  • 86a3e28d8e chore(build): reduce dependency Sass deprecation noise robbond 2026-11-03 12:54:24 +00:00
  • ba9294ad1a chore(deps): upgrade Next.js 16 with Webpack robbond 2026-11-03 11:10:11 +00:00
  • 16ca736789 chore(deps): update NextAuth v4 compatibility baseline robbond 2026-11-03 10:15:53 +00:00
  • bb50b17277 fix(ithc): correct server-side session retrieval for file APIs robbond 2026-11-03 09:25:02 +00:00
  • d417860d1d Merge branch 'SIPS-Development' into feature/ithc-mitigation robbond 2026-11-02 16:05:12 +00:00
  • cfbd72e313 Merged PR 2666: fix: remove duplicate getDetails import from representation loader Robert Bond 2026-11-02 13:08:20 +00:00
  • 93eabe8e6d Merged PR 2665: 25470 testing authentication handler Robert Bond 2026-11-02 12:41:09 +00:00
  • ce21a1a00f Merged PR 2664: fixes on advanced search Robert Bond 2026-10-30 11:06:32 +00:00
  • be2df2da8f Merge remote-tracking branch 'origin/SIPS-Development' into feature/ithc-mitigation robbond 2026-10-27 13:33:15 +00:00
  • 2b691ac4ef Merged PR 2653: fix: preserve LPA questionnaire PDF metadata during submission Robert Bond 2026-10-27 13:07:41 +00:00
  • 65616f6307 ITHC: enforce container ownership on uploads robbond 2026-10-27 06:05:47 +00:00