wmantly 07819a6254 security: sanitize markdown output and reduce PII logging ...

- Add isomorphic-dompurify to sanitize rendered docs HTML and Terms of Service
- Remove addLdapUser full-object logging that included password hashes
- Log only error name/message on auth/login failures instead of full LDAP error objects

Co-Authored-By: Claude <noreply@anthropic.com>

2026-07-18 22:56:35 -04:00

..

api_token.js

Add self-service API tokens (PATs) with UI + Bearer auth (#35)

2026-07-12 17:12:35 -04:00

auth.js

security: sanitize markdown output and reduce PII logging

2026-07-18 22:56:35 -04:00

email.js

chore(release): public-release readiness and security fixes for 1.1.16

2026-07-18 22:08:11 -04:00

group_ldap.js

chore(release): public-release readiness and security fixes for 1.1.16

2026-07-18 22:08:11 -04:00

index.js

Add self-service API tokens (PATs) with UI + Bearer auth (#35)

2026-07-12 17:12:35 -04:00

notification.js

Updated frontend

2026-07-01 11:10:09 -04:00

oauth_client.js

chore(release): public-release readiness and security fixes for 1.1.16

2026-07-18 22:08:11 -04:00

oauth_code.js

chore(release): public-release readiness and security fixes for 1.1.16

2026-07-18 22:08:11 -04:00

sms.js

Updated frontend

2026-07-01 11:10:09 -04:00

token.js

chore(release): public-release readiness and security fixes for 1.1.16

2026-07-18 22:08:11 -04:00

tos.js

Make Terms of Service editable at runtime by admins (closes #39)

2026-07-16 13:44:46 -04:00

user_ldap.js

security: sanitize markdown output and reduce PII logging

2026-07-18 22:56:35 -04:00

user.js

Updated frontend

2026-07-01 11:10:09 -04:00

verification.js

Updated frontend

2026-07-01 11:10:09 -04:00