wmantly cf80c966eb security: swap sanitizer to xss and harden logging ...

- Replace isomorphic-dompurify with xss to avoid ESM-only transitive
  dependencies (jsdom/htmlparser2) that break the existing Jest test suite.
- Sanitize rendered docs and Terms-of-Service HTML via xss() in routes/docs.js
  and routes/index.js.
- Remove full-object new-user logging from models/user_ldap.js and reduce
  login-path error output to error.name/error.message only.

Co-Authored-By: Claude <noreply@anthropic.com>

2026-07-18 23:03:33 -04:00

..

api_token.js

Add self-service API tokens (PATs) with UI + Bearer auth (#35)

2026-07-12 17:12:35 -04:00

auth.js

Documentation cleanup for public release (#38)

2026-07-13 23:21:27 -04:00

docs.js

security: swap sanitizer to xss and harden logging

2026-07-18 23:03:33 -04:00

group.js

Updated frontend

2026-07-01 11:10:09 -04:00

index.js

security: swap sanitizer to xss and harden logging

2026-07-18 23:03:33 -04:00

notification.js

Add Unix/POSIX service accounts, distinct from LDAP bind-only ones

2026-07-15 20:52:50 -04:00

oauth_client.js

oath grpup fixes

2026-07-02 16:49:22 -04:00

oauth.js

chore(release): public-release readiness and security fixes for 1.1.16

2026-07-18 22:08:11 -04:00

token.js

Updated frontend

2026-07-01 11:10:09 -04:00

tos.js

Make Terms of Service editable at runtime by admins (closes #39)

2026-07-16 13:44:46 -04:00

update_check.js

Add standalone backup script and admin update-check banner

2026-07-15 22:33:55 -04:00

user.js

Add personal Unix group member management

2026-07-17 11:28:41 -04:00