root 7020d445b3 Update infra doc: MediaStack/Jellyfin verified detail, NordVPN LAN Discovery + wg0 lockout fix, VMID corrections

2026-07-06 13:09:02 -05:00

..

admin

Update infra doc: MediaStack/Jellyfin verified detail, NordVPN LAN Discovery + wg0 lockout fix, VMID corrections

2026-07-06 13:09:02 -05:00

agent

Stop hardcoding a generic watch_services list on every agent install

2026-07-02 20:28:42 -05:00

assets

Fix code review findings: unauthenticated infra doc + backup file exposure, onclick-attribute XSS breakouts (admin panel and front-end), plaintext calendar passwords, k()->j() typo, wildcard CORS, session cookie hardening (HttpOnly/SameSite)

2026-07-05 20:09:52 -05:00

.gitignore

Add reactor.py to deploy/ + gitignore WireGuard .conf files in public_html

2026-06-11 20:47:23 +00:00

.htaccess

Initial commit: JARVIS AI dashboard v2.3

2026-05-25 13:22:57 +00:00

api.php

Fix code review findings: unauthenticated infra doc + backup file exposure, onclick-attribute XSS breakouts (admin panel and front-end), plaintext calendar passwords, k()->j() typo, wildcard CORS, session cookie hardening (HttpOnly/SameSite)

2026-07-05 20:09:52 -05:00

bridge.php

fix: use default PHP session (PHPSESSID) not custom name — must match what api.php expects

2026-06-01 09:57:02 +00:00

index.html

fix: kiosk voice reliability — stopListening on exit, exitVoiceMode kiosk guard

2026-06-21 14:26:54 +00:00

index.php

fix: remove var sessionToken/sessionUser from injected script — conflicted with main script let declarations, killing all JS including logout()

2026-06-01 10:09:14 +00:00

install-agent.sh

Stop hardcoding a generic watch_services list on every agent install

2026-07-02 20:28:42 -05:00

login.php

fix: inject token as JS global (no sessionStorage needed), skip bridge.php, direct login→app

2026-06-01 10:01:00 +00:00

webhook.php

fix: remove dead __NOVACPX_VM__ branch, dedupe date() call in webhook

2026-06-23 18:03:22 +00:00