duffyduck
  • Joined on 2024-03-24
duffyduck pushed to main at Hacker-Software/opencrm 2026-05-16 17:56:04 +00:00
75c833500e Security-Hardening Runde 8: Cockpit-IDOR (Portal sah ALLE Kunden)
duffyduck pushed to main at Hacker-Software/opencrm 2026-05-16 17:39:40 +00:00
a7d12b8540 Security-Hardening Runde 7: Pentest Runde 3 (3 Findings)
duffyduck pushed to main at Hacker-Software/ARIA-AGENT 2026-05-16 17:20:17 +00:00
785f5d0805 fix(bridge): grosse File-Re-Downloads zerreissen nicht mehr die WS
duffyduck pushed to main at Hacker-Software/opencrm 2026-05-16 16:48:59 +00:00
8534be22d0 Einmalpasswort-Flow für Portal-Credentials
f0c97cd46d todo.md: Passwort-Komplexität + Real-IP-Fix dokumentiert
8a5ffbb563 Passwort-Komplexität + Portal-Credentials-UX
6af1a4bbd4 fix(security): trust proxy = 1 bei HTTPS_ENABLED – echte Client-IP statt Proxy-IP
92d2e62e79 security: portalPasswordHash + Encrypted aus embedded customer in /contracts/* entfernen
Compare 5 commits »
duffyduck pushed tag v0.1.5.9 to Hacker-Software/ARIA-AGENT 2026-05-16 16:47:56 +00:00
duffyduck pushed to main at Hacker-Software/ARIA-AGENT 2026-05-16 16:47:53 +00:00
fac87474ec release: bump version to 0.1.5.9
duffyduck released ARIA v0.1.5.9 at Hacker-Software/ARIA-AGENT 2026-05-16 16:47:53 +00:00
duffyduck pushed to main at Hacker-Software/ARIA-AGENT 2026-05-16 16:40:13 +00:00
8227266aea release: bump version to 0.1.5.8
duffyduck pushed tag v0.1.5.8 to Hacker-Software/ARIA-AGENT 2026-05-16 16:40:13 +00:00
duffyduck pushed to main at Hacker-Software/opencrm 2026-05-16 15:53:06 +00:00
08310ac302 security: CRITICAL IDOR-Fix auf Stressfrei-Email-Sub-Routes
72f7a9dbdb docs: BREACH-/-Marker konkret entfernen – exact-match-Location erklärt
Compare 2 commits »
duffyduck pushed to main at Hacker-Software/opencrm 2026-05-16 15:00:59 +00:00
c5dc271759 docs: BREACH-Marker auf SPA-Root / als bewusst akzeptiert dokumentieren
duffyduck pushed to main at Hacker-Software/opencrm 2026-05-16 14:54:56 +00:00
1451e362ff chore(env): JWT_EXPIRES_IN 15m + JWT_REFRESH_EXPIRES_IN dokumentieren
8188d17c87 fix(gdpr): processedBy aus useAuth statt totem localStorage('user')
Compare 2 commits »
duffyduck pushed to main at Hacker-Software/ARIA-AGENT 2026-05-16 14:39:42 +00:00
5d24e01d4b release: bump version to 0.1.5.7
duffyduck pushed tag v0.1.5.7 to Hacker-Software/ARIA-AGENT 2026-05-16 14:39:42 +00:00
duffyduck released ARIA v0.1.5.7 at Hacker-Software/ARIA-AGENT 2026-05-16 14:39:40 +00:00
duffyduck pushed to main at Hacker-Software/ARIA-AGENT 2026-05-16 14:21:46 +00:00
4fe72cc4a8 feat(chat): System-Hints in Bubbles ausblenden (Toggle in Settings)
eeeb1d43f5 chore(diagnostic): Gateway-Reste rauswerfen — Spam-Log weg
0044e222db fix(phone): Anruf-Erkennung im Hintergrund + bei gesperrtem Display
048d231b60 fix(wake): false-positive nach langer Hintergrund-Pause verwerfen
Compare 4 commits »
duffyduck pushed to main at Hacker-Software/opencrm 2026-05-16 14:14:26 +00:00
c4e62f0f50 docs: Pentest-Runden 11 + 12 in SECURITY-HARDENING + README aktualisieren
9830ac29a5 security: JWT raus aus localStorage – Refresh-Cookie-Pattern für SPA
Compare 2 commits »
duffyduck pushed to main at Hacker-Software/opencrm 2026-05-16 13:45:27 +00:00
0943f11999 security: Audit-Log für alle Klartext-Passwort-Reads (CRITICAL)
duffyduck pushed to main at Hacker-Software/ARIA-AGENT 2026-05-16 13:44:47 +00:00
2bac9c26ca release: bump version to 0.1.5.6
duffyduck pushed tag v0.1.5.6 to Hacker-Software/ARIA-AGENT 2026-05-16 13:44:47 +00:00