kjanat/livedash-node
1
0
Fork 0
mirror of https://github.com/kjanat/livedash-node.git synced 2026-01-16 09:52:09 +01:00
Code Issues Packages Projects Releases Wiki Activity
139 Commits 14 Branches 0 Tags
fix/pr-20-review-issues
Commit Graph

8 Commits

Author SHA1 Message Date
Kaj Kowalski
e100803ee9 fix: changed nonce attribution mismatch and removed ambient-light from middleware 2025-07-13 22:44:05 +02:00
Kaj Kowalski
2284a8dd08 fix: resolve dev server static asset warnings and 404 errors 
- Remove unnecessary nonce warnings for static assets
- Update middleware to properly skip static file processing
- Fix unused variable error in catch block
- Eliminate console spam during development
 2025-07-13 22:28:37 +02:00
Kaj Kowalski
6d5d0fd7a4 fix: resolve CSP violations and React hydration issues 
- Fix Permissions-Policy header: change ambient-light-sensor to ambient-light
- Add Google Fonts domain to font-src CSP for Leaflet map tiles
- Allow unsafe-inline for style-src to support third-party libraries (Sonner, Leaflet)
- Fix React hydration mismatch by conditionally adding nonce attribute
- Add debug logging for nonce retrieval issues

These changes resolve all CSP violations while maintaining security best practices.
 2025-07-13 22:23:40 +02:00
Kaj Kowalski
e1abedb148 feat: implement cache layer, CSP improvements, and database performance optimizations 
- Add Redis cache implementation with LRU eviction
- Enhance Content Security Policy with nonce generation
- Optimize database queries with connection pooling
- Add cache invalidation API endpoints
- Improve security monitoring performance
 2025-07-13 11:52:49 +02:00
Kaj Kowalski
1eea2cc3e4 refactor: fix biome linting issues and update project documentation 
- Fix 36+ biome linting issues reducing errors/warnings from 227 to 191
- Replace explicit 'any' types with proper TypeScript interfaces
- Fix React hooks dependencies and useCallback patterns
- Resolve unused variables and parameter assignment issues
- Improve accessibility with proper label associations
- Add comprehensive API documentation for admin and security features
- Update README.md with accurate PostgreSQL setup and current tech stack
- Create complete documentation for audit logging, CSP monitoring, and batch processing
- Fix outdated project information and missing developer workflows
 2025-07-12 00:28:09 +02:00
Kaj Kowalski
3e9e75e854 feat: implement comprehensive CSRF protection 2025-07-12 00:28:07 +02:00
Kaj Kowalski
fa7e815a3b feat: complete tRPC integration and fix platform UI issues 
- Implement comprehensive tRPC setup with type-safe API
- Create tRPC routers for dashboard, admin, and auth endpoints
- Migrate frontend components to use tRPC client
- Fix platform dashboard Settings button functionality
- Add platform settings page with profile and security management
- Create OpenAI API mocking infrastructure for cost-safe testing
- Update tests to work with new tRPC architecture
- Sync database schema to fix AIBatchRequest table errors
 2025-07-12 00:27:57 +02:00
Kaj Kowalski
7cc5cad14f security: enhance authentication rate limiting and add comprehensive security tests 
- Add rate limiting middleware for NextAuth login endpoints
- Implement authRateLimitMiddleware for /api/auth/* routes
- Add comprehensive security tests covering:
  - Rate limiter functionality (5 tests)
  - IP extraction from headers (5 tests)
  - Input validation and sanitization (10 tests)
  - Password strength requirements
  - XSS and SQL injection prevention
- All 21 security tests passing
- Rate limits configured: 5 login attempts per 15 minutes
 2025-07-12 00:27:51 +02:00