John Cardinal 692fececc7 case 4716 - unit pick-list customer variant parsed as a number ...

UnitPickList.GetVariantCriteria put the value of a "customerid:<value>"
variant from the request into the query unparsed, reachable by any login
(security review F43, found during case 4712). The value is now parsed as a
long; anything else means no restriction, as 0 already did. The client's
format ("customerid: 5") still works.

Checked: new test fails on the old code, passes now; pick-list tests 10/10.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-24 14:08:01 -07:00

.vscode

case 4711 - JWT signing key generated by the server; AYANOVA_JWT_SECRET removed

2026-10-24 12:01:08 -07:00

ayanova.tests

case 4690 - licence verification gate: ayanova.tests runs every v8 fixture key through License.Parse

2026-10-22 15:22:04 -07:00

custom-work

2023-01-21 01:23:19 +00:00

devdocs

case 4716 - unit pick-list customer variant parsed as a number

2026-10-24 14:08:01 -07:00

dist

case 4711 - JWT signing key generated by the server; AYANOVA_JWT_SECRET removed

2026-10-24 12:01:08 -07:00

docs/8.0

case 4716 - pick-list search text passed as SQL parameters

2026-10-24 12:28:43 -07:00

graphics

Raster versions of logos used to make an invoice for TNT medical might be useful again not code related

2023-02-15 00:11:01 +00:00

server/AyaNova

case 4716 - unit pick-list customer variant parsed as a number

2026-10-24 14:08:01 -07:00

.gitignore

case 4690 - build-release.bat: copy all output to build-output.txt; UTF-8 for MkDocs when piped

2026-10-23 11:37:29 -07:00

build-release.bat

case 4690 - build-release.bat: copy all output to build-output.txt; UTF-8 for MkDocs when piped

2026-10-23 11:37:29 -07:00

CLAUDE.md

Security review pass 1: scope, threat model, attack-surface map, first candidate findings

2026-10-23 18:00:18 -07:00

dev-raven.bat

case 4690 - version bump and confirmation of choices for net10-port

2026-10-22 12:38:37 -07:00

Dockerfile.docs

Case 4641 AI era starts now

2026-02-02 02:48:54 +00:00

makedocs.bat

Fix for issue that suddenly appeared for reasons I can't determine in which the corp docs hosted site stopped working with the same manual build I've always been using as it started to try to find the links from the root of the site instead if relatively in the docs folder. Adding the site_url seems to have fixed this issue and doesn't break a local install copy of the docs from within AyaNova so this seems to be resolved.

2024-05-03 22:35:35 +00:00

raven.sln

case 4642

2026-02-13 09:13:54 -08:00

servcustdocs.bat

customer docs

2022-03-31 22:35:14 +00:00

servdocs.bat

…

startsql.bat

2023-05-02 22:12:23 +00:00

Description

No description provided

178 MiB

Languages

C# 99.6%

JavaScript 0.2%

Batchfile 0.2%