myron 80b0dfc583 Document code review + fixes across all 4 DO-hosted business sites (2026-07-06)

2026-07-06 02:58:28 -05:00

..

downloads

Document code review + fixes across all 4 DO-hosted business sites (2026-07-06)

2026-07-06 02:58:28 -05:00

index.php

Fix code review findings: unauthenticated infra doc + backup file exposure, onclick-attribute XSS breakouts (admin panel and front-end), plaintext calendar passwords, k()->j() typo, wildcard CORS, session cookie hardening (HttpOnly/SameSite)

2026-07-05 20:09:52 -05:00