whisper-money/app/Http
Víctor Falcón 865b07de1e revert: drop out-of-scope changes from security round 2
- Remove the block-demo middleware additions: the demo account is a real
  user account and must be able to access its own data. The destructive
  actions (password/2FA/billing) stay protected by the pre-existing
  per-route block-demo guards.
- Revert TransactionSyncController (being deprecated, removed in a separate PR).
- Revert vite.config.ts change (bugsink is gone, handled in a separate PR).

Throttle additions are kept.
2026-07-03 16:56:33 +02:00
..
Controllers revert: drop out-of-scope changes from security round 2 2026-07-03 16:56:33 +02:00
Middleware refactor(ai): remove AiConsentSettings feature flag (#619) 2026-07-01 09:47:55 +02:00
Requests feat(transactions): serve import dedup and account ledger from the backend (#631) 2026-07-03 16:49:59 +02:00
Responses fix: route new PWA guests to signup (#313) 2026-04-21 10:53:05 +01:00