whisper-money/bootstrap
anshulnitin-cyberspace c4af43786b fix: address remaining security audit findings
- Add block-demo middleware to all authenticated route groups
  (settings, web routes, open-banking, api)
- Add rate limiting (throttle:120,1) to API routes
- Add rate limiting (throttle:10,1) to OAuth callback
- Replace trustProxies(at: '*') with env-based TRUSTED_PROXIES config
- Clear state_token on EnableBanking session creation failure
- Move Sentry auth token from hardcoded to SENTRY_AUTH_TOKEN env
- Replace Blade {{ }} with @json() for XSS-safe JS variable injection
- Add limit(500) + has_more flag to TransactionSyncController
- Add since date validation to TransactionSyncController
- Add user_id scoping to Api/TransactionController bulkUpdate
2026-07-03 16:56:33 +02:00
..
cache Set up a fresh Laravel app 2025-11-07 12:01:36 +00:00
app.php fix: address remaining security audit findings 2026-07-03 16:56:33 +02:00
providers.php chore: upgrade Laravel 12 to 13 (#242) 2026-03-25 12:56:33 +00:00