2 Commits

Author SHA1 Message Date
TenerifeProp Dev
503eb8a62f feat: implement property page navigation and security fixes
- Fix XSS vulnerabilities with escapeHtml() utility
- Fix SQL injection in admin endpoints with column whitelisting
- Add CSRF protection middleware
- Remove hardcoded password backdoor
- Implement property navigation functions
- Add test coverage

Closes #9
2026-04-05 01:34:48 +01:00
TenerifeProp Dev
3bbbb126ab feat: add authentication, admin API, and security improvements
- Add session-based authentication system
- Implement admin CRUD endpoints for properties, leads, testimonials, FAQ, services
- Fix security issue: remove public GET /api/leads endpoint
- Add basic input validation for leads endpoint
- Add global error handler
- Fix Docker healthcheck using bun's fetch
- Add @types/bcrypt dependency
- Add .dockerignore
- Add host reboot prohibition to global rules
2026-04-05 00:01:54 +01:00