System Improvements#674

Open

hunterino wants to merge 150 commits intomoqui:masterfrom

Commits on Oct 16, 2025

Commits on Oct 23, 2025

Merge branch 'master' into upgrade-gradle
pythys
committed

Commits on Nov 5, 2025

Commits on Nov 25, 2025

Commits on Nov 26, 2025

Commits on Dec 1, 2025

[SEC-001] Fix XXE vulnerability in XML parser

hunterino
and
claude
committed
[SEC-002] Upgrade password hashing to BCrypt

hunterino
and
claude
committed
[SEC-003] Fix session fixation vulnerability

hunterino
and
claude
committed
[SEC-004] Remove credentials from log statements

hunterino
and
claude
committed
[SEC-005] Add security headers (CSP, HSTS, X-Frame-Options)

hunterino
and
claude
committed
[SHIRO-001..004] Upgrade Apache Shiro to 2.0.6

hunterino
and
claude
committed
[SHIRO-005] Add comprehensive authentication tests for Shiro 2.x

hunterino
and
claude
committed
Add Java 21 module system compatibility and system evaluation docs

hunterino
and
claude
committed
[CICD-001..005] Setup CI/CD pipeline with GitHub Actions

hunterino
and
claude
committed
[SEC-006, SEC-007] Strengthen CSRF tokens and add SameSite cookie support

hunterino
and
claude
committed
[SEC-008] Remove API key authentication from URL parameters

hunterino
and
claude
committed
[SEC-009] Add safe deserialization with class filtering

hunterino
and
claude
committed
[SEC-010] Add path traversal protection for file resources

hunterino
and
claude
committed

Commits on Dec 2, 2025

[DEP-001..005] Update dependencies to latest versions

hunterino
and
claude
committed

Commits on Dec 6, 2025

Commits on Dec 7, 2025

Commits on Dec 8, 2025

Commits on Dec 10, 2025

Tests Passing
hunterino
committed

Commits on Dec 11, 2025

Merge remote-tracking branch 'origin/master'
hunterino
committed

Commits on Dec 16, 2025

Commits on Dec 19, 2025

fix remaining shiro2 bugs
pythys
committed

Commits on Dec 21, 2025

Commits on Dec 25, 2025

upgrade to groovy 5
pythys
committed

Commits on Dec 29, 2025

Commits on Jan 2, 2026

Merge pull request #682 from pythys/upgrade-gradle
acetousk
authored

Commits on Jan 3, 2026