Ulas 5b1e6915ac fix(security): replace hardcoded session secret fallback with random generation ...

Instead of a static 'dev-only-secret-not-for-production' fallback,
generate a random one-time secret in development. Warns that sessions
won't survive restarts. Production guard unchanged.

2026-04-03 21:59:41 +02:00

..

middleware

fix: enforce Secure flag on session and CSRF cookies by default

2026-04-01 18:34:31 +02:00

routes

fix(budget): fix category update failing with SQLite binding error

2026-04-03 18:28:31 +02:00

services

fix(security): address critical and high findings from security audit

2026-04-03 17:28:36 +02:00

auth.js

fix(security): replace hardcoded session secret fallback with random generation

2026-04-03 21:59:41 +02:00

db-schema-test.js

style: replace em dashes with hyphens throughout codebase

2026-04-03 17:04:39 +02:00

db.js

style: replace em dashes with hyphens throughout codebase

2026-04-03 17:04:39 +02:00

index.js

fix(security): address critical and high findings from security audit

2026-04-03 17:28:36 +02:00