John Cardinal 1ccbd7745c case 4727 - safe security headers on every response ...

Every response carries X-Content-Type-Options: nosniff, X-Frame-Options:
SAMEORIGIN and Referrer-Policy: strict-origin, so self-hosted installs
get them too (the hosted nginx sends the same values). F35 (4727 step 6).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-24 22:01:38 -07:00

..

biz

case 4693 - form field lists published only when fully built

2026-10-24 20:28:11 -07:00

ControllerHelpers

case 4725 - sessions end on password reset and login disabled, exact login route, default SuperUser limited when licensed

2026-10-24 19:54:03 -07:00

Controllers

case 4727 - attached-by override for admins only, export download by its owner only

2026-10-24 21:39:50 -07:00

DataList

case 4690 - data-list date filters: >= and < from the start of the minute, != excludes the whole minute; null check first

2026-10-22 20:38:23 -07:00

generator

case 4690 - backup: run pg_dump without a shell, password in PGPASSWORD, failures detected by exit code

2026-10-22 20:00:52 -07:00

kpi

case 4717 - KPI interval accepted only as a known date unit

2026-10-24 12:36:52 -07:00

models

…

PickList

case 4712 - customer contacts' pick lists limited to their own records

2026-10-24 14:14:43 -07:00

resource

case 4597

2024-05-13 23:10:34 +00:00

util

case 4726 - login lockout per login name and per address

2026-10-24 20:12:26 -07:00

appsettings.Development.json

…

appsettings.json

case 4690 - appsettings.json: Debug/Console log levels Trace -> Warning

2026-10-22 19:47:31 -07:00

AyaNova.csproj

case 4690 - remaining packages to current releases (Bogus, jose-jwt, QRCoder); Newtonsoft.Json direct reference

2026-10-22 19:47:31 -07:00

ayanova.ico

…

ConfigureSwaggerOptions.cs

case 4690 - Swashbuckle 10.3.1 / OpenAPI.NET 2: namespace and security requirement changes; drop explicit Microsoft.OpenApi

2026-10-22 16:46:49 -07:00

Program.cs

case 4724 - SMTP certificate checked, password never returned

2026-10-24 19:09:02 -07:00

Startup.cs

case 4727 - safe security headers on every response

2026-10-24 22:01:38 -07:00