lxe/workflow-app
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
22 Commits 2 Branches 0 Tags
DEV2.0
Commit Graph

5 Commits

Author SHA1 Message Date
Kühn
4d5ab818e9 Robustheits-Fix: RFC-5321-konforme E-Mail-Local-Parts (keine Rand-Punkte/Doppelpunkte) + sAMAccountName-Fallback bei Nicht-Latin-Namen + Release v11 2026-09-17 13:15:27 +02:00
Kühn
1c28917bb5 Umlaut-Fix: zentrale Transliteration (ae/oe/ue/ss) fuer E-Mails, UPN und sAMAccountName + Release v10 2026-09-16 11:27:03 +02:00
Kühn
a05133f39d Fix AD user creation: userAccountControl must be string for ldapts 2026-08-28 11:28:56 +02:00
Kühn
03d20b0e09 Security fixes N4/H2/H1 + hide template editor for non-admins 2026-08-28 10:15:31 +02:00
Kühn
6be1791c62 DEV1.0: Initial commit - Workflow Portal with security fixes 
- Backend: Express.js + PostgreSQL/SQLite with LDAP/AD integration
- Frontend: React 18 + Vite + TailwindCSS/DaisyUI
- Security fixes applied (2026-07 + 2026-08):
  - LDAP injection prevention, CSRF protection, HttpOnly cookies
  - Session hashing (SHA-256), account lockout, rate limiting
  - Input validation (zod), file upload security, CSP/HSTS headers
  - V3: express-rate-limit updated (ip-address SSRF fix)
  - V4: postcss updated (nanoid DoS fix)
  - V5: Rate-limit on /health endpoint
  - V6: Session rotation on login (session fixation prevention)
  - V9: Task values array limit (DoS prevention)
  - V10: Frontend XSS audit completed
- Docker: Multi-stage build, non-root user, PostgreSQL + backup service
 2026-08-24 09:45:28 +02:00