d343037bbd
Security: Fix critical vulnerabilities and implement security hardening
...
CRITICAL SECURITY FIXES:
- Fixed certificate validation bypass vulnerability in BTCPayServerService
* Removed unsafe ServerCertificateCustomValidationCallback
* Added environment-specific SSL configuration
* Production now enforces proper SSL validation
- Fixed overly permissive CORS policy
* Replaced AllowAnyOrigin() with specific trusted origins
* Created separate CORS policies for Development/Production/API
* Configured from appsettings for environment-specific control
- Implemented CSRF protection across admin panel
* Added [ValidateAntiForgeryToken] to all POST/PUT/DELETE actions
* Protected 10 admin controllers with anti-forgery tokens
* Prevents Cross-Site Request Forgery attacks
CONFIGURATION IMPROVEMENTS:
- Created appsettings.Development.json for dev-specific settings
- Added Security:AllowInsecureSSL flag (Development only)
- Added CORS:AllowedOrigins configuration arrays
- Created comprehensive security roadmap (ROADMAP.md)
ALSO FIXED:
- TeleBot syntax errors (Program.cs, MessageFormatter.cs)
- Added enterprise-full-stack-developer output style
Impact: All Phase 1 critical security vulnerabilities resolved
Status: Ready for security review and deployment preparation
🤖 Generated with [Claude Code](https://claude.ai/code )
Co-Authored-By: Claude <noreply@anthropic.com>
2025-09-19 11:56:12 +01:00
SilverLabs DevTeam
36b393dd2e
Update BTCPay integration with production credentials and deployment documentation
...
- Updated API key and Store ID to production values
- Added comprehensive deployment documentation
- Fixed invoice creation to use GBP (fiat) currency
- Documented successful production deployment status
- Added manual deployment instructions
- Updated CLAUDE.md with latest integration fixes
Production Status:
- BTCPay connection working with v2.2.1
- Store "Shop" configured with ID: CvdvHoncGLM7TdMYRAG6Z15YuxQfxeMWRYwi9gvPhh5R
- Invoice creation functional (wallets need BTCPay-side configuration)
🤖 Generated with [Claude Code](https://claude.ai/code )
Co-Authored-By: Claude <noreply@anthropic.com>
2025-09-19 11:17:43 +01:00
SilverLabs DevTeam
54618348ab
Update LittleShop configuration and deployment files
...
- Modified CLAUDE.md documentation
- Updated Dockerfile configuration
- Updated Program.cs and production settings
- Added deployment scripts for Hostinger
- Added Hostinger environment configuration
🤖 Generated with Claude Code
Co-Authored-By: Claude <noreply@anthropic.com>
2025-09-18 19:27:58 +01:00
e1b377a042
Initial commit of LittleShop project (excluding large archives)
...
- BTCPay Server integration
- TeleBot Telegram bot
- Review system
- Admin area
- Docker deployment configuration
🤖 Generated with [Claude Code](https://claude.ai/code )
Co-Authored-By: Claude <noreply@anthropic.com>
2025-09-17 15:07:38 +01:00
sysadmin
cccb4e4d03
"BotUI-Baseline"
2025-08-28 12:33:32 +01:00
sysadmin
df71a80eb9
Initial-implementation
2025-08-20 13:20:19 +01:00
