- Fixed accessibility in audit logs with keyboard navigation and ARIA attributes
- Refactored ThreatAnalysisResults interface to module level for reusability
- Added BatchOperation enum validation and proper CSV escaping in batch monitoring
- Removed unused company state causing skeleton view in dashboard overview
- Enhanced error handling with user-facing messages for metrics loading
- Replaced hardcoded timeouts with condition-based waits in E2E tests
- Removed duplicate state management in security monitoring hooks
- Fixed CSRF documentation to show proper secret fallback pattern
- Updated CSP metrics docs with GDPR Article 6(1)(f) legal basis clarification
- Fixed React hooks order to prevent conditional execution after early returns
- Added explicit button type to prevent form submission behavior
This commit introduces a range of improvements across the application:
- **Security:**
- Adds authentication to the CSP metrics endpoint.
- Hardens CSP bypass detection regex to prevent ReDoS attacks.
- Improves CORS headers for the CSP metrics API.
- Adds filtering for acknowledged alerts in security monitoring.
- **Performance:**
- Optimizes database connection pooling for NeonDB.
- Improves session fetching with abort controller.
- **Stability:**
- Adds error handling to the tRPC demo component.
- Fixes type inconsistencies in session data mapping.
- **Docs & DX:**
- Ignores files in git.
- Fixes a token placeholder in the documentation.
- Fix 36+ biome linting issues reducing errors/warnings from 227 to 191
- Replace explicit 'any' types with proper TypeScript interfaces
- Fix React hooks dependencies and useCallback patterns
- Resolve unused variables and parameter assignment issues
- Improve accessibility with proper label associations
- Add comprehensive API documentation for admin and security features
- Update README.md with accurate PostgreSQL setup and current tech stack
- Create complete documentation for audit logging, CSP monitoring, and batch processing
- Fix outdated project information and missing developer workflows