No description
Find a file
rene 71e588a240 Security Nice-to-Have: Dockerfile, Magic-Bytes, Path-Traversal, TABLE_MAP, Deps
- Dockerfile: non-root user appuser, chown /data + /app
- media_utils: validate_upload() Magic-Byte-Check (JPEG/PNG/GIF/WebP/MP4/WebM)
- media_utils: safe_media_path() Path-Traversal-Schutz beim Löschen
- diary/health/dogs: safe_media_path() statt os.path.join + lstrip
- diary: validate_upload() vor jedem Medien-Upload
- forum: _LIKE_TABLE dict statt dynamischer String-Interpolation
- requirements: uvicorn 0.34, PyJWT 2.10.1, pydantic 2.10.6, bcrypt 4.3, httpx 0.28.1, anthropic 0.49
- SW by-v319, APP_VER 307
2026-04-23 18:42:05 +02:00
backend Security Nice-to-Have: Dockerfile, Magic-Bytes, Path-Traversal, TABLE_MAP, Deps 2026-04-23 18:42:05 +02:00
diary Sprint 15: Suche, Ausweis, Teilen, Widget 2026-04-17 15:51:09 +02:00
scripts Docker: voller Pfad /usr/local/bin/docker auf DS (nicht im PATH) 2026-04-12 16:57:16 +02:00
.env.example Sprint 14: Map-Fixes, City-Prewarm, Dog-Animation, Scan-Flash 2026-04-17 14:06:10 +02:00
.gitignore Fix: .claude/worktrees in .gitignore aufnehmen 2026-04-17 09:33:27 +02:00
docker-compose.yml Feature: Ratings, Lightbox, Forum-Standort, Notifications, Routen-Recording, Chat-Picker 2026-04-19 09:40:35 +02:00
Dockerfile Security Nice-to-Have: Dockerfile, Magic-Bytes, Path-Traversal, TABLE_MAP, Deps 2026-04-23 18:42:05 +02:00
Makefile Sprint 10: OSM-POI-Cache, Karten-Clustering, Routen-Redesign 2026-04-15 16:30:10 +02:00
PROJEKT.md PROJEKT.md: Stand 2026-04-23, SW by-v312, Desktop-Layout dokumentiert 2026-04-23 17:53:34 +02:00