curo1305andClaude Sonnet 4.6 10970d9557 fix(06): CR-07 validate event_type against allowlist before LIKE filter ...

Add _VALID_EVENT_PREFIXES frozenset and validate event_type at all three
filter sites in audit.py (_build_filtered_query, _build_filtered_query
_with_handles, and the inline count query in list_audit_log). Invalid
values return HTTP 422. Also change like() pattern from prefix% to
prefix.% to enforce true prefix-match semantics.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-04 23:15:48 +02:00

..

__init__.py

chore: initial commit — existing single-user document scanner codebase

2026-05-22 08:53:28 +02:00

admin.py

refactor(backend): extract shared helper modules per architecture rules

2026-06-02 16:10:35 +02:00

audit.py

fix(06): CR-07 validate event_type against allowlist before LIKE filter

2026-06-04 23:15:48 +02:00

auth.py

fix(06): CR-05 hash attempted email in audit log to avoid PII storage

2026-06-04 23:15:48 +02:00

cloud.py

fix(06): CR-04 add allowlist validation for default_storage_backend

2026-06-04 23:15:48 +02:00

documents.py

fix(06): CR-03 replace raw X-Forwarded-For reads with get_client_ip()

2026-06-04 23:15:48 +02:00

folders.py

refactor(backend): extract shared helper modules per architecture rules

2026-06-02 16:10:35 +02:00

shares.py

refactor(backend): extract shared helper modules per architecture rules

2026-06-02 16:10:35 +02:00

topics.py

feat(phase-4): complete UX redesign — FileManagerView, FolderTreeItem, test suite, and all Phase 4 fixes

2026-05-28 17:10:52 +02:00