DEV1.0: Initial commit - Workflow Portal with security fixes

- Backend: Express.js + PostgreSQL/SQLite with LDAP/AD integration - Frontend: React 18 + Vite + TailwindCSS/DaisyUI - Security fixes applied (2026-07 + 2026-08): - LDAP injection prevention, CSRF protection, HttpOnly cookies - Session hashing (SHA-256), account lockout, rate limiting - Input validation (zod), file upload security, CSP/HSTS headers - V3: express-rate-limit updated (ip-address SSRF fix) - V4: postcss updated (nanoid DoS fix) - V5: Rate-limit on /health endpoint - V6: Session rotation on login (session fixation prevention) - V9: Task values array limit (DoS prevention) - V10: Frontend XSS audit completed - Docker: Multi-stage build, non-root user, PostgreSQL + backup service
2026-08-24 09:45:28 +02:00
commit 6be1791c62
103 changed files with 12253 additions and 0 deletions
--- a/backups/workflow_20260727_123700.sql.gz
+++ b/backups/workflow_20260727_123700.sql.gz
--- a/backups/workflow_20260727_123743.sql.gz
+++ b/backups/workflow_20260727_123743.sql.gz
--- a/backups/workflow_20260727_123848.sql.gz
+++ b/backups/workflow_20260727_123848.sql.gz
--- a/backups/workflow_20260728_060307.sql.gz
+++ b/backups/workflow_20260728_060307.sql.gz
--- a/backups/workflow_20260728_061026.sql.gz
+++ b/backups/workflow_20260728_061026.sql.gz
--- a/backups/workflow_20260728_111622.sql.gz
+++ b/backups/workflow_20260728_111622.sql.gz
--- a/backups/workflow_20260728_171621.sql.gz
+++ b/backups/workflow_20260728_171621.sql.gz
--- a/backups/workflow_20260728_231619.sql.gz
+++ b/backups/workflow_20260728_231619.sql.gz
--- a/backups/workflow_20260729_051618.sql.gz
+++ b/backups/workflow_20260729_051618.sql.gz
--- a/backups/workflow_20260729_111615.sql.gz
+++ b/backups/workflow_20260729_111615.sql.gz
--- a/backups/workflow_20260730_121825.sql.gz
+++ b/backups/workflow_20260730_121825.sql.gz
--- a/backups/workflow_20260730_181824.sql.gz
+++ b/backups/workflow_20260730_181824.sql.gz
--- a/backups/workflow_20260731_001822.sql.gz
+++ b/backups/workflow_20260731_001822.sql.gz
--- a/backups/workflow_20260731_061821.sql.gz
+++ b/backups/workflow_20260731_061821.sql.gz
--- a/backups/workflow_20260731_070100.sql.gz
+++ b/backups/workflow_20260731_070100.sql.gz
--- a/backups/workflow_20260731_070705.sql.gz
+++ b/backups/workflow_20260731_070705.sql.gz
--- a/backups/workflow_20260731_070759.sql.gz
+++ b/backups/workflow_20260731_070759.sql.gz
--- a/backups/workflow_20260731_082025.sql.gz
+++ b/backups/workflow_20260731_082025.sql.gz
--- a/backups/workflow_20260731_084457.sql.gz
+++ b/backups/workflow_20260731_084457.sql.gz
--- a/backups/workflow_20260731_084716.sql.gz
+++ b/backups/workflow_20260731_084716.sql.gz
--- a/backups/workflow_20260731_084833.sql.gz
+++ b/backups/workflow_20260731_084833.sql.gz
--- a/backups/workflow_20260731_144831.sql.gz
+++ b/backups/workflow_20260731_144831.sql.gz
--- a/backups/workflow_20260803_075323.sql.gz
+++ b/backups/workflow_20260803_075323.sql.gz
--- a/backups/workflow_20260803_135322.sql.gz
+++ b/backups/workflow_20260803_135322.sql.gz
--- a/backups/workflow_20260804_085755.sql.gz
+++ b/backups/workflow_20260804_085755.sql.gz
--- a/backups/workflow_20260804_145754.sql.gz
+++ b/backups/workflow_20260804_145754.sql.gz
--- a/backups/workflow_20260804_205753.sql.gz
+++ b/backups/workflow_20260804_205753.sql.gz
--- a/backups/workflow_20260805_025751.sql.gz
+++ b/backups/workflow_20260805_025751.sql.gz
--- a/backups/workflow_20260805_085748.sql.gz
+++ b/backups/workflow_20260805_085748.sql.gz
--- a/backups/workflow_20260805_145746.sql.gz
+++ b/backups/workflow_20260805_145746.sql.gz
--- a/backups/workflow_20260805_205745.sql.gz
+++ b/backups/workflow_20260805_205745.sql.gz
--- a/backups/workflow_20260806_025743.sql.gz
+++ b/backups/workflow_20260806_025743.sql.gz
--- a/backups/workflow_20260806_085741.sql.gz
+++ b/backups/workflow_20260806_085741.sql.gz
--- a/backups/workflow_20260810_062308.sql.gz
+++ b/backups/workflow_20260810_062308.sql.gz
--- a/backups/workflow_20260810_122307.sql.gz
+++ b/backups/workflow_20260810_122307.sql.gz
--- a/backups/workflow_20260810_182306.sql.gz
+++ b/backups/workflow_20260810_182306.sql.gz
--- a/backups/workflow_20260811_002305.sql.gz
+++ b/backups/workflow_20260811_002305.sql.gz
--- a/backups/workflow_20260811_062304.sql.gz
+++ b/backups/workflow_20260811_062304.sql.gz
--- a/backups/workflow_20260811_122302.sql.gz
+++ b/backups/workflow_20260811_122302.sql.gz
--- a/backups/workflow_20260811_182301.sql.gz
+++ b/backups/workflow_20260811_182301.sql.gz
--- a/backups/workflow_20260812_002300.sql.gz
+++ b/backups/workflow_20260812_002300.sql.gz
--- a/backups/workflow_20260812_062257.sql.gz
+++ b/backups/workflow_20260812_062257.sql.gz
--- a/backups/workflow_20260812_122256.sql.gz
+++ b/backups/workflow_20260812_122256.sql.gz
--- a/backups/workflow_20260820_100335.sql.gz
+++ b/backups/workflow_20260820_100335.sql.gz
--- a/backups/workflow_20260820_160337.sql.gz
+++ b/backups/workflow_20260820_160337.sql.gz
--- a/backups/workflow_20260820_220336.sql.gz
+++ b/backups/workflow_20260820_220336.sql.gz
--- a/backups/workflow_20260821_040335.sql.gz
+++ b/backups/workflow_20260821_040335.sql.gz
--- a/backups/workflow_20260821_100334.sql.gz
+++ b/backups/workflow_20260821_100334.sql.gz
--- a/backups/workflow_20260821_160332.sql.gz
+++ b/backups/workflow_20260821_160332.sql.gz