groove/Part-DB-server
1
0
Fork 0
mirror of https://github.com/Part-DB/Part-DB-server.git synced 2026-05-19 18:01:30 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
Part-DB-server/translations
History
Sebastian Almberg dd8698840d Harden backup security: password confirmation, CSRF, env toggle 
Address security review feedback from jbtronics:

- Add IS_AUTHENTICATED_FULLY to all sensitive endpoints (create/delete
  backup, delete log, download backup, start update, restore)
- Change backup download from GET to POST with CSRF token
- Require password confirmation before downloading backups (backups
  contain sensitive data like password hashes and secrets)
- Add DISABLE_BACKUP_DOWNLOAD env var (default: disabled) to control
  whether backup downloads are allowed
- Add password confirmation modal with security warning in template
- Add comprehensive tests: auth checks, env var blocking, POST-only
  enforcement, status/progress endpoint auth
2026-03-05 19:06:54 +01:00
..
.gitignore Initial commit 2019-02-23 16:49:38 +01:00
frontend.cs.xlf New Crowdin updates (#1227) 2026-02-07 19:14:35 +01:00
frontend.da.xlf New Crowdin updates (#1228) 2026-02-15 22:24:00 +01:00
frontend.de.xlf New Crowdin updates (#1228) 2026-02-15 22:24:00 +01:00
frontend.el.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
frontend.en.xlf New Crowdin updates (#1228) 2026-02-15 22:24:00 +01:00
frontend.es.xlf New Crowdin updates (#1227) 2026-02-07 19:14:35 +01:00
frontend.fr.xlf New Crowdin updates (#1227) 2026-02-07 19:14:35 +01:00
frontend.hu.xlf New Crowdin updates (#1228) 2026-02-15 22:24:00 +01:00
frontend.it.xlf New Crowdin updates (#1227) 2026-02-07 19:14:35 +01:00
frontend.ja.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
frontend.nl.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
frontend.pl.xlf New Crowdin updates (#1227) 2026-02-07 19:14:35 +01:00
frontend.ru.xlf New Crowdin updates (#1227) 2026-02-07 19:14:35 +01:00
frontend.uk.xlf New Crowdin updates (#1228) 2026-02-15 22:24:00 +01:00
frontend.zh.xlf New Crowdin updates (#1228) 2026-02-15 22:24:00 +01:00
messages.cs.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
messages.da.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
messages.de.xlf New Crowdin updates (#1265) 2026-03-01 23:21:02 +01:00
messages.el.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
messages.en.xlf Harden backup security: password confirmation, CSRF, env toggle 2026-03-05 19:06:54 +01:00
messages.es.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
messages.fr.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
messages.hu.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
messages.it.xlf New Crowdin updates (#1265) 2026-03-01 23:21:02 +01:00
messages.ja.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
messages.nl.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
messages.pl.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
messages.ru.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
messages.zh.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
SchebTwoFactorBundle+intl-icu.de.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
SchebTwoFactorBundle+intl-icu.en.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
SchebTwoFactorBundle.de.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
SchebTwoFactorBundle.en.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
security.cs.xlf New Crowdin updates (#1227) 2026-02-07 19:14:35 +01:00
security.da.xlf New Crowdin updates (#1228) 2026-02-15 22:24:00 +01:00
security.de.xlf New Crowdin updates (#1228) 2026-02-15 22:24:00 +01:00
security.el.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
security.en.xlf New Crowdin updates (#1228) 2026-02-15 22:24:00 +01:00
security.es.xlf New Crowdin updates (#1227) 2026-02-07 19:14:35 +01:00
security.fr.xlf New Crowdin updates (#1227) 2026-02-07 19:14:35 +01:00
security.hr.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
security.hu.xlf New Crowdin updates (#1228) 2026-02-15 22:24:00 +01:00
security.it.xlf New Crowdin updates (#1227) 2026-02-07 19:14:35 +01:00
security.ja.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
security.nl.xlf New Crowdin updates (#1228) 2026-02-15 22:24:00 +01:00
security.pl.xlf New Crowdin updates (#1227) 2026-02-07 19:14:35 +01:00
security.ru.xlf New Crowdin updates (#1227) 2026-02-07 19:14:35 +01:00
security.uk.xlf New Crowdin updates (#1228) 2026-02-15 22:24:00 +01:00
security.vi.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
security.zh.xlf New Crowdin updates (#1228) 2026-02-15 22:24:00 +01:00
validators.cs.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
validators.da.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
validators.de.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
validators.el.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
validators.en.xlf New Crowdin updates (#1228) 2026-02-15 22:24:00 +01:00
validators.fr.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
validators.hr.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
validators.hu.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
validators.it.xlf New Crowdin updates (#1265) 2026-03-01 23:21:02 +01:00
validators.ja.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
validators.nl.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
validators.pl.xlf New Crowdin updates (#1228) 2026-02-15 22:24:00 +01:00
validators.ru.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
validators.uk.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00
validators.zh.xlf Remove outdated file source and path notes from translation files (#1225) 2026-02-07 18:33:31 +01:00