Pentest fixes and hardening#321

Open

level09 wants to merge 52 commits into

auto-update-simplifiedfrom

Commits on Apr 21, 2026

Commits on Apr 23, 2026

v4.0.1: fix bulk OCR celery queue routing (#323)
level09
authored

Commits on May 1, 2026

Commits on May 3, 2026

fix(settings): URL-encode DB and Redis passwords in connection URLs
level09
committed

Commits on May 7, 2026

docs(BAY-01-005): admin bootstrap, Compose v2, env-file
level09
committed

Commits on May 14, 2026

fix(BAY-01-041): cap media import Celery task with soft/hard time limit
level09
committed
fix(BAY-01-038): coerce parse_excel column labels to strings
level09
committed

Commits on May 16, 2026

Commits on May 17, 2026

fix(BAY-01-040): type-guard malformed bodies in Export.from_json
level09
committed

Commits on May 18, 2026

fix(BAY-01-009): enforce edit boundary on media update endpoint
level09
committed

Commits on May 19, 2026

Commits on May 20, 2026

Commits on May 22, 2026

fix(BAY-01-039): sanitize handle_mismatch description sink
level09
committed

Commits on May 24, 2026