null a9cdf846fe v0.19.2: fix legacy DB migration login failure + security hardening ... CRITICAL fix: Users upgrading from pre-migration-tracking databases (now get 'invalid username/password' because schema_migrations table doesn't exist. Added handleLegacyDatabase() and reconcileLegacyMigrations() to detect and reconcile legacy DBs. Security fixes: - Path traversal: replaced sanitizePath() with ALLOWED_FILES allowlist - Public /about bypass: added admin route guard in App.jsx - Sensitive info exposure: expanded redactSensitiveContent() patterns - Error message path leaks: generic error messages only - Race condition: wrapped in db.transaction() in server.js - Password validation: INIT_REGULAR_PASS min 8 chars with process.exit(1) All verified by Bishop (build + runtime) and Private_Hudson (security).		2026-05-09 18:25:25 -05:00
..
images	init	2026-05-04 14:17:32 -05:00
Authentik-Integration.md	push	2026-05-09 13:03:36 -05:00
CSRF-SPA-Setup.md	push	2026-05-09 13:03:36 -05:00
Engineering_Reference_Manual.md	v0.19.2: fix legacy DB migration login failure + security hardening	2026-05-09 18:25:25 -05:00
Engineering_Reference_promp.md	push	2026-05-09 13:03:36 -05:00
RATE_LIMITING_ENHANCEMENT.md	push	2026-05-09 13:03:36 -05:00
UI_IMPROVEMENTS.md	push	2026-05-09 13:03:36 -05:00