John Cardinal 21c55e8d01 Security review pass 4: report rendering ...

F19 (critical, confirmed on the local server): report template import has no
role check, so any login, customer contacts included, can add a template whose
JavaScript runs in the server's browser. From code: F20 (templates get the
renderer's token, SuperUser for customer notification reports, and unrestricted
network access), F21 (download file names from the URL not checked; Windows),
F22 (minor job and template gaps). Review only, no code changes.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-23 20:04:23 -07:00

.vscode

case 4690 - retarget net10.0; framework-matched Microsoft.* 10.0.13, Npgsql EF 10.0.3

2026-10-22 14:50:47 -07:00

ayanova.tests

case 4690 - licence verification gate: ayanova.tests runs every v8 fixture key through License.Parse

2026-10-22 15:22:04 -07:00

custom-work

2023-01-21 01:23:19 +00:00

devdocs

Security review pass 4: report rendering

2026-10-23 20:04:23 -07:00

dist

case 4690 - Windows network install: official PostgreSQL download link (installer and manual); examples for PostgreSQL 18

2026-10-23 16:06:27 -07:00

docs/8.0

case 4690 - Windows network install: official PostgreSQL download link (installer and manual); examples for PostgreSQL 18

2026-10-23 16:06:27 -07:00

graphics

Raster versions of logos used to make an invoice for TNT medical might be useful again not code related

2023-02-15 00:11:01 +00:00

server/AyaNova

case 4690 - report browser: launch chrome-headless-shell; writable config/cache folders for the browser; Ubuntu 24.04 droplet results

2026-10-23 08:12:21 -07:00

.gitignore

case 4690 - build-release.bat: copy all output to build-output.txt; UTF-8 for MkDocs when piped

2026-10-23 11:37:29 -07:00

build-release.bat

case 4690 - build-release.bat: copy all output to build-output.txt; UTF-8 for MkDocs when piped

2026-10-23 11:37:29 -07:00

CLAUDE.md

Security review pass 1: scope, threat model, attack-surface map, first candidate findings

2026-10-23 18:00:18 -07:00

dev-raven.bat

case 4690 - version bump and confirmation of choices for net10-port

2026-10-22 12:38:37 -07:00

Dockerfile.docs

Case 4641 AI era starts now

2026-02-02 02:48:54 +00:00

makedocs.bat

Fix for issue that suddenly appeared for reasons I can't determine in which the corp docs hosted site stopped working with the same manual build I've always been using as it started to try to find the links from the root of the site instead if relatively in the docs folder. Adding the site_url seems to have fixed this issue and doesn't break a local install copy of the docs from within AyaNova so this seems to be resolved.

2024-05-03 22:35:35 +00:00

raven.sln

case 4642

2026-02-13 09:13:54 -08:00

servcustdocs.bat

customer docs

2022-03-31 22:35:14 +00:00

servdocs.bat

2022-03-22 20:09:17 +00:00

startsql.bat

2023-05-02 22:12:23 +00:00

Description

No description provided

178 MiB

Languages

C# 99.6%

JavaScript 0.2%

Batchfile 0.2%