harheimertc

audit-log.js

Update Apache SSL configuration and enhance security features across multiple files. Changed X-Frame-Options to SAMEORIGIN for better security, added optional Content Security Policy headers for testing, and improved password handling with HaveIBeenPwned checks during user registration and password reset. Implemented passkey login functionality in the authentication flow, including UI updates for user experience. Enhanced image upload processing with size limits and validation, and added rate limiting for various API endpoints to prevent abuse.

2026-01-05 11:50:57 +01:00

auth.js

Implemented the possibility ofa hidden user for playstore tests

2026-06-09 11:32:00 +02:00

contact-requests.js

Add unit tests for data file rotation utility functions

2026-06-01 11:21:21 +02:00

cookies.js

Update CMS navigation links and remove membership application page

2026-02-09 09:58:46 +01:00

data-file-rotation.js

semgrep problems fix

2026-06-10 13:55:50 +02:00

email-service.js

Enhance deploy-test.sh with functions for Node.js version management, dependency installation, and public document synchronization. Implement checks for Node.js version requirements and improve error handling for document syncing. Update environment configuration in harheimertc.test.config.cjs to support development and test environments. Modify email recipient logic in contact and email service APIs to prevent notifications in test environments. Add tests to verify behavior in test conditions.

2026-04-16 13:06:14 +02:00

encryption.js

Add security comments to path handling in various scripts to clarify internal constant usage and mitigate path traversal risks. Update logging in registration and verification processes for improved clarity.

2026-04-15 20:52:38 +02:00

hibp.js

Update Apache SSL configuration and enhance security features across multiple files. Changed X-Frame-Options to SAMEORIGIN for better security, added optional Content Security Policy headers for testing, and improved password handling with HaveIBeenPwned checks during user registration and password reset. Implemented passkey login functionality in the authentication flow, including UI updates for user experience. Enhanced image upload processing with size limits and validation, and added rate limiting for various API endpoints to prevent abuse.

2026-01-05 11:50:57 +01:00

logger.js

Aktualisiere die Version auf 1.4.3, füge Validierung für Saison-Slugs hinzu und implementiere ein Logging-System für Fehler und Informationen

2026-05-20 11:20:54 +02:00

members.js

Add unit tests for data file rotation utility functions

2026-06-01 11:21:21 +02:00

news.js

Add unit tests for data file rotation utility functions

2026-06-01 11:21:21 +02:00

newsletter.js

Implemented the possibility ofa hidden user for playstore tests

2026-06-09 11:32:00 +02:00

notification-settings.js

Fix in news, first android notification service

2026-06-10 13:47:33 +02:00

passkey-recovery.js

Implement passkey recovery feature, including email link requests and registration options. Update login and registration pages to support passkey authentication, with UI enhancements for user experience. Add server-side handling for passkey registration and login, including account activation checks. Update environment configuration for passkey recovery TTL settings.

2026-01-07 18:37:01 +01:00

password-reset-log.js

refactor(security): use centralized getServerDataPath in password-reset-log.js

2026-05-27 19:55:11 +02:00

path-security.js

Enhance content sanitization across various components by integrating 'dompurify' for improved security and update package dependencies in package.json and package-lock.json.

2025-12-20 10:49:20 +01:00

paths.js

fix(security): centralize data path validation in getServerDataPath; enforce segment whitelist and resolved-path check

2026-05-27 19:53:59 +02:00

pdf-field-mapper.js

Enhance security and error handling in various components by refining error catch blocks to ignore specific errors, improving code clarity and consistency across the application.

2025-12-20 15:05:49 +01:00

pdf-form-filler.js

Enhance security and error handling in various components by refining error catch blocks to ignore specific errors, improving code clarity and consistency across the application.

2025-12-20 15:05:49 +01:00

pdf-generator-service.js

Enhance security and error handling in various components by refining error catch blocks to ignore specific errors, improving code clarity and consistency across the application.

2025-12-20 15:05:49 +01:00

push-notifications.js

logging update

2026-06-10 16:03:37 +02:00

qttr-import.js

feat: add QTTR values feature to member area

2026-05-30 23:43:06 +02:00

rate-limit.js

Update Apache SSL configuration and enhance security features across multiple files. Changed X-Frame-Options to SAMEORIGIN for better security, added optional Content Security Policy headers for testing, and improved password handling with HaveIBeenPwned checks during user registration and password reset. Implemented passkey login functionality in the authentication flow, including UI updates for user experience. Enhanced image upload processing with size limits and validation, and added rate limiting for various API endpoints to prevent abuse.

2026-01-05 11:50:57 +01:00

spielklassen-tables-import.js

fix(import): prefer seasonal mannschaften csv for tables

2026-05-20 18:58:46 +02:00

spielplan-data.js

Aktualisiere die Version auf 1.4.3, füge Validierung für Saison-Slugs hinzu und implementiere ein Logging-System für Fehler und Informationen

2026-05-20 11:20:54 +02:00

spielplan-import.js

Add script for importing match schedule and logging

2026-05-19 16:23:28 +02:00

spielplan-publish.js

fix(import): publish season spielplan json after import

2026-05-20 18:12:32 +02:00

termine.js

Add unit tests for data file rotation utility functions

2026-06-01 11:21:21 +02:00

upload-validation.js

Update Apache SSL configuration and enhance security features across multiple files. Changed X-Frame-Options to SAMEORIGIN for better security, added optional Content Security Policy headers for testing, and improved password handling with HaveIBeenPwned checks during user registration and password reset. Implemented passkey login functionality in the authentication flow, including UI updates for user experience. Enhanced image upload processing with size limits and validation, and added rate limiting for various API endpoints to prevent abuse.

2026-01-05 11:50:57 +01:00

webauthn-challenges.js

Enhance debug logging and Cross-Device support for Passkey Registration

2026-01-08 23:27:11 +01:00

webauthn-config.js

feat(auth): implement Android refresh token handling and session management

2026-05-27 19:34:53 +02:00

webauthn-encoding.js

Update Apache SSL configuration and enhance security features across multiple files. Changed X-Frame-Options to SAMEORIGIN for better security, added optional Content Security Policy headers for testing, and improved password handling with HaveIBeenPwned checks during user registration and password reset. Implemented passkey login functionality in the authentication flow, including UI updates for user experience. Enhanced image upload processing with size limits and validation, and added rate limiting for various API endpoints to prevent abuse.

2026-01-05 11:50:57 +01:00