From cf26f7c3c159644429fbb6537de516ee479face1 Mon Sep 17 00:00:00 2001 From: mirivlad Date: Fri, 17 Jul 2026 06:03:49 +0800 Subject: [PATCH] docs(roadmap): record web console hardening --- 07_Full_Implementation_Roadmap.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/07_Full_Implementation_Roadmap.md b/07_Full_Implementation_Roadmap.md index f58fef0..889fd12 100644 --- a/07_Full_Implementation_Roadmap.md +++ b/07_Full_Implementation_Roadmap.md @@ -163,6 +163,9 @@ Verified in the current implementation: users, devices, vaults, storage, audit, SMTP settings, and diagnostics; protect its mutations with sessions, CSRF, security headers, and administrator re-authentication for sensitive changes. +- [x] remove the former hardcoded server HTML, add bounded admin list queries, + vault aggregate/detail diagnostics without file payloads, sanitised admin + diagnostics download, and a real headless-Chromium smoke script. Known limits in this phase: