Kühn 6be1791c62 DEV1.0: Initial commit - Workflow Portal with security fixes ...

- Backend: Express.js + PostgreSQL/SQLite with LDAP/AD integration
- Frontend: React 18 + Vite + TailwindCSS/DaisyUI
- Security fixes applied (2026-07 + 2026-08):
  - LDAP injection prevention, CSRF protection, HttpOnly cookies
  - Session hashing (SHA-256), account lockout, rate limiting
  - Input validation (zod), file upload security, CSP/HSTS headers
  - V3: express-rate-limit updated (ip-address SSRF fix)
  - V4: postcss updated (nanoid DoS fix)
  - V5: Rate-limit on /health endpoint
  - V6: Session rotation on login (session fixation prevention)
  - V9: Task values array limit (DoS prevention)
  - V10: Frontend XSS audit completed
- Docker: Multi-stage build, non-root user, PostgreSQL + backup service

2026-08-24 09:45:28 +02:00

backend

DEV1.0: Initial commit - Workflow Portal with security fixes

2026-08-24 09:45:28 +02:00

backups

DEV1.0: Initial commit - Workflow Portal with security fixes

2026-08-24 09:45:28 +02:00

frontend

DEV1.0: Initial commit - Workflow Portal with security fixes

2026-08-24 09:45:28 +02:00

.dockerignore

DEV1.0: Initial commit - Workflow Portal with security fixes

2026-08-24 09:45:28 +02:00

.env.example

DEV1.0: Initial commit - Workflow Portal with security fixes

2026-08-24 09:45:28 +02:00

.gitignore

DEV1.0: Initial commit - Workflow Portal with security fixes

2026-08-24 09:45:28 +02:00

docker-compose.yml

DEV1.0: Initial commit - Workflow Portal with security fixes

2026-08-24 09:45:28 +02:00

Dockerfile

DEV1.0: Initial commit - Workflow Portal with security fixes

2026-08-24 09:45:28 +02:00

info.md

DEV1.0: Initial commit - Workflow Portal with security fixes

2026-08-24 09:45:28 +02:00

Description

No description provided

840 KiB

Languages

JavaScript 99.1%

Dockerfile 0.4%

CSS 0.3%

HTML 0.2%