docs(roadmap): record web console hardening
This commit is contained in:
parent
f18fc2f727
commit
cf26f7c3c1
|
|
@ -163,6 +163,9 @@ Verified in the current implementation:
|
||||||
users, devices, vaults, storage, audit, SMTP settings, and diagnostics;
|
users, devices, vaults, storage, audit, SMTP settings, and diagnostics;
|
||||||
protect its mutations with sessions, CSRF, security headers, and
|
protect its mutations with sessions, CSRF, security headers, and
|
||||||
administrator re-authentication for sensitive changes.
|
administrator re-authentication for sensitive changes.
|
||||||
|
- [x] remove the former hardcoded server HTML, add bounded admin list queries,
|
||||||
|
vault aggregate/detail diagnostics without file payloads, sanitised admin
|
||||||
|
diagnostics download, and a real headless-Chromium smoke script.
|
||||||
|
|
||||||
Known limits in this phase:
|
Known limits in this phase:
|
||||||
|
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue