|
|
7806bb2392
|
Docs: Channel Lock & PIN Protection feature design
- Created comprehensive design document (docs/CHANNEL_LOCK_DESIGN.md)
- Complete UX flows with PIN setup, unlock, and auto-lock modes
- Technical implementation details with code examples
- Security architecture (PBKDF2, brute force protection)
- Database schema changes and migration plan
- Testing strategy and implementation checklist
- Added to ROADMAP.md as Phase 3, Item #1 (HIGH PRIORITY)
- Target: October 2025 implementation
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <noreply@anthropic.com>
|
2025-10-06 04:39:29 +01:00 |
|
|
|
d343037bbd
|
Security: Fix critical vulnerabilities and implement security hardening
CRITICAL SECURITY FIXES:
- Fixed certificate validation bypass vulnerability in BTCPayServerService
* Removed unsafe ServerCertificateCustomValidationCallback
* Added environment-specific SSL configuration
* Production now enforces proper SSL validation
- Fixed overly permissive CORS policy
* Replaced AllowAnyOrigin() with specific trusted origins
* Created separate CORS policies for Development/Production/API
* Configured from appsettings for environment-specific control
- Implemented CSRF protection across admin panel
* Added [ValidateAntiForgeryToken] to all POST/PUT/DELETE actions
* Protected 10 admin controllers with anti-forgery tokens
* Prevents Cross-Site Request Forgery attacks
CONFIGURATION IMPROVEMENTS:
- Created appsettings.Development.json for dev-specific settings
- Added Security:AllowInsecureSSL flag (Development only)
- Added CORS:AllowedOrigins configuration arrays
- Created comprehensive security roadmap (ROADMAP.md)
ALSO FIXED:
- TeleBot syntax errors (Program.cs, MessageFormatter.cs)
- Added enterprise-full-stack-developer output style
Impact: All Phase 1 critical security vulnerabilities resolved
Status: Ready for security review and deployment preparation
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>
|
2025-09-19 11:56:12 +01:00 |
|
