docs(roadmap): record web console hardening

This commit is contained in:
mirivlad 2026-07-17 06:03:49 +08:00
parent f18fc2f727
commit cf26f7c3c1
1 changed files with 3 additions and 0 deletions

View File

@ -163,6 +163,9 @@ Verified in the current implementation:
users, devices, vaults, storage, audit, SMTP settings, and diagnostics; users, devices, vaults, storage, audit, SMTP settings, and diagnostics;
protect its mutations with sessions, CSRF, security headers, and protect its mutations with sessions, CSRF, security headers, and
administrator re-authentication for sensitive changes. administrator re-authentication for sensitive changes.
- [x] remove the former hardcoded server HTML, add bounded admin list queries,
vault aggregate/detail diagnostics without file payloads, sanitised admin
diagnostics download, and a real headless-Chromium smoke script.
Known limits in this phase: Known limits in this phase: