wmantly cf80c966eb security: swap sanitizer to xss and harden logging ...

- Replace isomorphic-dompurify with xss to avoid ESM-only transitive
  dependencies (jsdom/htmlparser2) that break the existing Jest test suite.
- Sanitize rendered docs and Terms-of-Service HTML via xss() in routes/docs.js
  and routes/index.js.
- Remove full-object new-user logging from models/user_ldap.js and reduce
  login-path error output to error.name/error.message only.

Co-Authored-By: Claude <noreply@anthropic.com>

2026-07-18 23:03:33 -04:00

..

bin

Updated frontend

2026-07-01 11:10:09 -04:00

conf

White-label: title/logo now driven by conf (closes #6)

2026-07-16 17:26:01 -04:00

controller

Updated frontend

2026-07-01 11:10:09 -04:00

middleware

Air-gap: remove dead CDN reference + in-app /docs

2026-07-16 15:33:46 -04:00

models

security: sanitize markdown output and reduce PII logging

2026-07-18 22:56:35 -04:00

public

Unify service accounts to one kind, add manager field, make homeDirectory/loginShell editable

2026-07-17 00:32:19 -04:00

routes

security: swap sanitizer to xss and harden logging

2026-07-18 23:03:33 -04:00

services

Add standalone backup script and admin update-check banner

2026-07-15 22:33:55 -04:00

tests

Add CI (Jest against the real bundled image); fix ppolicy pwdLockout default

2026-07-16 16:54:05 -04:00

utils

Add standalone backup script and admin update-check banner

2026-07-15 22:33:55 -04:00

views

Add plain-language concept docs; fix docs viewer rendering; link API tokens

2026-07-17 21:49:27 -04:00

.gitignore

beta

2020-05-03 18:22:51 -04:00

app.js

Unify service accounts to one kind, add manager field, make homeDirectory/loginShell editable

2026-07-17 00:32:19 -04:00

package-lock.json

security: swap sanitizer to xss and harden logging

2026-07-18 23:03:33 -04:00

package.json

security: swap sanitizer to xss and harden logging

2026-07-18 23:03:33 -04:00