Torsten Schulz (local) f883d45452 fix(security): harden season file paths for semgrep

2026-05-20 18:03:29 +02:00

..

app

Refactor readPackageVersion function to support multiple candidate paths for package.json

2026-04-27 16:52:12 +02:00

auth

Erweitere die Passkey-Registrierung um Unterstützung für bevorzugte Authentifikatortypen und verbessere die Fehlerbehandlung.

2026-05-15 13:30:15 +02:00

cms

feat(mannschaften): split SUN columns and prepare seasonal team CSVs

2026-05-20 17:45:14 +02:00

galerie

Refactor file handling to prioritize internal data directories for backups and uploads; enhance error handling and logging for metadata and CSV operations.

2026-02-11 11:42:24 +01:00

mannschaften

feat(cms): add season dropdown/create and restore baelle ratio

2026-05-20 17:49:19 +02:00

media

Apply non-major audit updates and harden path handling for Semgrep.

2026-04-15 21:00:28 +02:00

members

Enhance security and error handling in various components by refining error catch blocks to ignore specific errors, improving code clarity and consistency across the application.

2025-12-20 15:05:49 +01:00

membership

chore: remove unused createRequire import from generate-pdf.post.js

2026-05-20 12:27:48 +02:00

newsletter

Enhance newsletter subscription functionality with user profile integration

2026-01-09 09:01:23 +01:00

personen

Update Apache SSL configuration and enhance security features across multiple files. Changed X-Frame-Options to SAMEORIGIN for better security, added optional Content Security Policy headers for testing, and improved password handling with HaveIBeenPwned checks during user registration and password reset. Implemented passkey login functionality in the authentication flow, including UI updates for user experience. Enhanced image upload processing with size limits and validation, and added rate limiting for various API endpoints to prevent abuse.

2026-01-05 11:50:57 +01:00

spielplan

feat(api): add endpoint for team table data by season

2026-05-20 17:38:17 +02:00

birthdays.get.js

Implement birthdate input in member profile management. Update API to handle birthdate data for user profiles and enhance visibility settings for birthday display in member lists.

2026-04-01 11:19:23 +02:00

config.get.js

Enhance security and error handling in various components by refining error catch blocks to ignore specific errors, improving code clarity and consistency across the application.

2025-12-20 15:05:49 +01:00

config.put.js

Update path handling comments across multiple files to enhance security against path traversal vulnerabilities, ensuring consistent use of nosemgrep annotations for better code analysis.

2025-12-20 14:49:57 +01:00

contact.post.js

Enhance deploy-test.sh with functions for Node.js version management, dependency installation, and public document synchronization. Implement checks for Node.js version requirements and improve error handling for document syncing. Update environment configuration in harheimertc.test.config.cjs to support development and test environments. Modify email recipient logic in contact and email service APIs to prevent notifications in test environments. Add tests to verify behavior in test conditions.

2026-04-16 13:06:14 +02:00

galerie.get.js

Initial commit: Harheimer TC Website

2025-10-21 00:41:12 +02:00

mannschaften.get.js

fix(security): harden season file paths for semgrep

2026-05-20 18:03:29 +02:00

members.delete.js

Update dependencies to include TinyMCE and Quill, enhance Navigation component with a new Newsletter submenu, and implement role-based access control for CMS features. Refactor user role handling to support multiple roles and improve user management functionality across various API endpoints.

2025-12-19 09:51:28 +01:00

members.get.js

Add birthdate handling in member registration and management. Update UI to conditionally require birthdate for new members, and enhance API to enforce birthdate validation. Improve tests to cover new birthdate requirements.

2026-03-31 07:25:44 +02:00

members.post.js

Update German text for clarity in member management UI and API error messages, correcting "Fuer" to "Für" and "koennen" to "können" for improved readability.

2026-04-01 11:55:27 +02:00

news-public.get.js

Enhance news component functionality and UI; implement dynamic grid layout in PublicNews.vue, add visibility and expiration options in news management, and update API to handle new fields for improved news filtering and display.

2025-10-24 12:47:27 +02:00

news.delete.js

Update dependencies to include TinyMCE and Quill, enhance Navigation component with a new Newsletter submenu, and implement role-based access control for CMS features. Refactor user role handling to support multiple roles and improve user management functionality across various API endpoints.

2025-12-19 09:51:28 +01:00

news.get.js

Add internal news system with role-based write permissions

2025-10-21 14:47:00 +02:00

news.post.js

Update dependencies to include TinyMCE and Quill, enhance Navigation component with a new Newsletter submenu, and implement role-based access control for CMS features. Refactor user role handling to support multiple roles and improve user management functionality across various API endpoints.

2025-12-19 09:51:28 +01:00

profile.get.js

Implement birthdate input in member profile management. Update API to handle birthdate data for user profiles and enhance visibility settings for birthday display in member lists.

2026-04-01 11:19:23 +02:00

profile.put.js

Implement birthdate input in member profile management. Update API to handle birthdate data for user profiles and enhance visibility settings for birthday display in member lists.

2026-04-01 11:19:23 +02:00

spielplaene.get.js

Enhance authentication checks in CMS API endpoints; implement user role validation for admin and board access. Refactor Spielpläne API to remove unnecessary logging and improve error handling. Update tests to mock user authentication and ensure proper validation of file uploads.

2025-11-10 13:18:29 +01:00

spielplan.get.js

Aktualisiere die Version auf 1.4.3, füge Validierung für Saison-Slugs hinzu und implementiere ein Logging-System für Fehler und Informationen

2026-05-20 11:20:54 +02:00

termine-manage.delete.js

Update dependencies to include TinyMCE and Quill, enhance Navigation component with a new Newsletter submenu, and implement role-based access control for CMS features. Refactor user role handling to support multiple roles and improve user management functionality across various API endpoints.

2025-12-19 09:51:28 +01:00

termine-manage.get.js

Update dependencies to include TinyMCE and Quill, enhance Navigation component with a new Newsletter submenu, and implement role-based access control for CMS features. Refactor user role handling to support multiple roles and improve user management functionality across various API endpoints.

2025-12-19 09:51:28 +01:00

termine-manage.post.js

Update dependencies to include TinyMCE and Quill, enhance Navigation component with a new Newsletter submenu, and implement role-based access control for CMS features. Refactor user role handling to support multiple roles and improve user management functionality across various API endpoints.

2025-12-19 09:51:28 +01:00

termine.get.js

Refactor file handling to prioritize internal data directories for backups and uploads; enhance error handling and logging for metadata and CSV operations.

2026-02-11 11:42:24 +01:00

vereinsmeisterschaften.get.js

Refactor file handling to prioritize internal data directories for backups and uploads; enhance error handling and logging for metadata and CSV operations.

2026-02-11 11:42:24 +01:00