cesnimda/jobtrackingapp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(security): enforce audited account, network and resource boundaries

Browse Source 
Implement B01-B06 with regression coverage and retained validation evidence. Preserve the production ingress preflight; F04 runtime verification remains open.
This commit is contained in:
cesnimda
2026-09-09 18:21:47 +02:00
parent 7d641edc7b
commit 0954876295
116 changed files with 10101 additions and 122 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/todo/work.md
+15
View File
@@ -1,3 +1,18 @@
# Expanded production audit — 2026-09-07
- [ ] B06 implementation complete; **F04 open, runtime/production verification incomplete**. Fresh 166 focused backend, 3 Compose, 6 Production HTTP and 9 B04 HTTP checks pass; prior broader/build evidence retained. Public DNS/valid HTTPS observed; ports 3000/5202/8080 unreachable from this workstation. HTTP redirects to unreachable HTTPS port 444. Docker inference-socket failure blocks real Compose/Traefik/nginx tests; actual peers/backend client IP and production host/firewall evidence require operator handoff (no documented SSH alias). See `docs/audits/2026-09-07/validation/b06-completion.md`. B01–B05 preserved; B07 not started.
- [x] B05 only: shared spreadsheet-safe text policy across all 13 CSV text columns; typed fields/storage/JSON unchanged. Original Excel `=1+1` evaluation now literal text; UTF-8 BOM and byte-preserving download retain Norwegian text. 25 focused CSV cases, 902 broader backend, 298 frontend, 18 browser tests, nine unchanged B04 HTTP scenarios and B03 admission probe pass; Release builds/lint pass. Existing R01a TS2571 remains. Evidence: `docs/audits/2026-09-07/validation/b05-completion.md`. B06 recommended next, not started.
- [x] B04 only: resolve authenticated principal before account-aware limiting; preserve IP security policies and B01–B03. A/B shared-IP controls each admit 2/reject 1; simultaneous sessions/cookie/bearer share owner budgets. Nine real HTTP scenarios, 877 selected backend, 36 affected frontend and 17 browser tests plus B03 admission probe pass. Release build/lint pass; existing R01a TS2571 remains. Evidence: `docs/audits/2026-09-07/validation/b04-completion.md`.
- [x] B03 only: all PDF callers share process/owner admission; cancellation, failure, timeout and shutdown recovery covered. Authenticated multi-route probe: limit 2, admitted 2, rejected 10, actual maximum 2, recovery 200. Final 875 selected backend, 296 frontend and 17 browser tests pass; Release builds/lint pass. Existing R01a TypeScript failure and R04 containment evidence remain open. Evidence: `docs/audits/2026-09-07/validation/b03-completion.md`. B01/B02 preserved.
- [x] B02 only: enforce retained-request session context server-side and clear private state across account switches. Original replay now returns 409 with both profiles unchanged; 853 backend, 294 frontend and 17 browser tests pass, plus final 4-scenario B02 rerun. Builds/lint pass; existing R01a TypeScript failure remains. Evidence: `docs/audits/2026-09-07/validation/b02-completion.md`.
- [x] B01 only: enforce normalized HTTP import destinations at socket connection; 98 focused tests, 840 broader backend tests and warnings-as-errors build pass. Evidence: `docs/audits/2026-09-07/validation/b01-completion.md`. B07 remains unstarted; F11 remains partially remediated.
- [x] Independently validate all 11 original P1 findings against implementation and fresh local evidence; challenge severity/root causes and record the account-switch corruption and mapped-address import bypass in `docs/audits/2026-09-07/validation/README.md`.
- [x] Produce the sized implementation queue, safe parallel work, recovery-before-migration gates and first-session B01 handoff in `docs/audits/2026-09-07/validation/implementation-queue.md`. The validation was planning only; subsequent B01–B05 status is recorded above.
- [x] Map all 416 requested areas to current source/test evidence, proposals and explicit verification gaps.
- [x] Run available isolated regression and adversarial checks; record failures and runtime-only gaps.
- [x] Deliver threat/data/failure/abuse matrices, 21 prioritized findings, operational checklists and all 50 failure answers in `docs/audits/2026-09-07/`. Application fixes and the listed production/manual verification gates remain open.
# Career / CV improvement work — 2026-08-26
## Current