myron 10350cbcd8 Update infrastructure reference: document 2026-07-06 security review and fixes

2026-07-05 20:13:21 -05:00

..

downloads

Update infrastructure reference: document 2026-07-06 security review and fixes

2026-07-05 20:13:21 -05:00

index.php

Fix code review findings: unauthenticated infra doc + backup file exposure, onclick-attribute XSS breakouts (admin panel and front-end), plaintext calendar passwords, k()->j() typo, wildcard CORS, session cookie hardening (HttpOnly/SameSite)

2026-07-05 20:09:52 -05:00