Nick SzaunigandClaude Opus 5.5 fc887d8431 fix(ui): encode every id in API paths (client-side path traversal) ...

Follow-up to a7609ff for the whole frontend: all 30 API helpers in
src/lib now pass path values through encodeURIComponent, so an id taken
from the URL can never leave its own path segment and make the page call
another endpoint with the viewer's token.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

2026-10-06 06:40:25 +02:00

.gitea/workflows

Env Update

2026-08-27 08:32:47 +02:00

ApiCore-Backend

fix(stock): require raw-material permission to consume, guard quantity edits

2026-10-06 06:31:06 +02:00

ApiCore-Frontend

fix(ui): encode every id in API paths (client-side path traversal)

2026-10-06 06:40:25 +02:00

deploy/k8s

fix(backup): seal backups and require step-up auth to restore

2026-10-01 02:12:43 +02:00

docs

docs(spec): raw materials and production addendum

2026-10-06 06:31:38 +02:00

ARCHITECTURE.md

docs: API security model, audit results and operating notes

2026-10-01 07:27:22 +02:00

CLAUDE.md

Env Update

2026-08-27 08:32:47 +02:00

TASKS.md

docs: record review findings, verification state and new architecture decisions

2026-09-27 13:01:47 +02:00

S

Description

ApiCore - Imkereidokumentationssoftware

https://apicore.encry.de/

7 MiB

0 Stars 1 Watchers 0 Forks

Languages

TypeScript 98.5%

JavaScript 0.8%

Python 0.3%

CSS 0.2%

PLpgSQL 0.1%