5 Commits

Include renames

Author	SHA1	Message	Date
bruno	d6cca2b1af	feat: #85 T10 persistance etat (verrous stores, ratelimit SQLite) et cloture refonte	2026-09-26 18:10:10 -04:00
bruno	162a5b4acc	fix(security): consolidation & securite phase 1 (#84, BUG-021 a BUG-034) ... - sanitizer XSS serveur (markdown + page de partage) [BUG-021/022] - rate-limit/lockout MFA [BUG-023] - isolation vaults par segments [BUG-024] - caps regex ReDoS [BUG-025] - SSRF webhooks + secrets externalises [BUG-026] - rotation/revocation des jetons [BUG-027] - politique de mot de passe + invalidation sessions [BUG-028] - verrous users.json [BUG-029] - IP reelle dans les audits [BUG-030] - rate-limit par compte [BUG-031] - symlinks hors vault ignores [BUG-032] - recherche simple via inverted index [BUG-033] - token en memoire + cookie HttpOnly, CSP durcie [BUG-034] Tests: pytest 961 passed / 6 skipped, ruff 0, mypy 0, frontend vert.	2026-09-13 10:51:42 -04:00
bruno	1673531b43	fix: resolve all CI lint and security issues ... - ruff: 602→0 errors (428 auto-fixed, pyproject.toml ignores for FastAPI patterns) - bandit: skip B310 (urllib for vault file access is intentional) - Fixed SIM118 (dict.keys()→dict), PERF102, SIM113, SIM117 - Created pyproject.toml with ruff + bandit config - 285 tests still pass	2026-07-24 10:38:44 -04:00
bruno	1a14927f36	fix: resolve all 28 mypy type errors + re-enable coverage in CI	2026-05-28 12:57:30 -04:00
bruno	482937fb30	Add audit logging, rate limiting, secret redactor, and backlinks ... Implement several security and feature improvements across the backend and frontend: - New IP-based rate limiter for authentication endpoints - New audit logging system for sensitive operations - New secret redactor to mask sensitive patterns in rendered content - Configurable token TTL and IGNORED_DIRS via environment variables - Add backlink index and API endpoint - Add preview tab support with single/double-click behavior in tree - Add file backup before write/delete operations	2026-05-26 10:27:00 -04:00