Repository navigation

Close access control and input handling holes, test against tmc-langs - #608

Merged

nygrenh merged 11 commits into

security-pass-2026-11

Nov 10, 2026

Merged

Close access control and input handling holes, test against tmc-langs#608
nygrenh merged 11 commits into
masterfrom
security-pass-2026-11

Commits on Nov 9, 2026
Commits on Nov 10, 2026
- Harden OAuth tokens, password checks, throttles and CSRF
  nygrenh
  committed
  36b1d61
- Harden sessions, flash, logs, CSV exports and recorded IPs
  nygrenh
  committed
  e27d2e4
- Download tmc-langs safely and fix security review findings
  nygrenh
  committed
  29c60c7
- Send nullable fields in forms tmc-langs can parse
  nygrenh
  committed
  988caf7
- Accept tmc_cli_rust and test the client-facing APIs
  nygrenh
  committed
  86eec39
- Run the vscode extension's tmc-langs build against the server
  nygrenh
  committed
  684d3b0