Files Changed

Browse Source

Security Fixes
File	Change
.env.local	Placeholder JWT secret (rotate to random value: openssl rand -base64 64)
src/middleware.ts	Removed /api/auth/me bypass; API routes return JSON 401 (not 302 redirect)
src/lib/auth.ts	sameSite: "lax" → "strict" (create + destroy cookie); SVG name chars are pre-computed (no injection)
src/lib/avatar.ts	Added sanitizeName() — strips non-alphanumeric/safe chars, max 50 chars
src/app/api/users/route.ts	POST restricted to super_admin; validates role against whitelist ["sales","admin","super_admin","dev"]; validates active defaults to true
src/app/api/users/[id]/route.ts	DELETE restricted to super_admin; blocks self-deletion
src/app/api/leads/[id]/route.ts	GET: non-admin users filtered by assigned_to; PATCH: ownership check + score validated 0-100 range
src/app/api/leads/route.ts	DELETE: ownership + admin check; GET: ownership filter for non-admin users
src/app/api/conversations/[id]/messages/route.ts	GET/POST: verify user is a conversation_participant before access
rust-ai/src/main.rs	CORS: AllowOrigin::list(["localhost:3006", "127.0.0.1:3006"]) (was Any)
Performance Fixes
File	Change
src/app/api/leads/route.ts	Added limit (default 50), offset query params; ownership filter in SQL
src/app/api/users/route.ts	Added limit (default 50), offset query params
src/app/api/conversations/route.ts	Added LIMIT 50
src/app/api/leads/[id]/notes/route.ts	Added limit (default 50), offset query params
src/app/api/conversations/[id]/messages/route.ts	Added limit (default 100), offset, before query params
src/app/(dashboard)/chats/page.tsx	Pruned to 5 cached conversations; useMemo wraps messages/conversation/filteredConversations; otherParticipant moved outside component; added 10MB file size limit; recordingChunksRef cleared on discard
src/app/(dashboard)/leads/[id]/page.tsx	Optimistic status update rolls back on fetch failure
database/migrations/003_chat.sql	Added composite index idx_messages_conversation_created on (conversation_id, created_at DESC)
Code Quality Fixes
File	Change
src/lib/ai.ts	Removed dead getInstructions()/updateInstructions() (called nonexistent /ai/instructions)
src/lib/auth.ts	bcrypt.hash(password, 12) — kept (acceptable, OWASP-recommended)
src/app/login/page.tsx	"Forgot password?" button now shows alert to contact admin (was no-op)
src/components/users/user-form-dialog.tsx	Password min 6 → 8 chars
26 silent catch {} blocks across 16 files (see below)	Added console.warn("...") context messages

...

This commit is contained in:

Ace

2026-06-23 09:45:30 +02:00

parent 9df78f7d10

commit abb77bf2f2

1229 changed files with 1145 additions and 1052 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

rust-ai/target/debug/.fingerprint/atoi-2fbe13d0da7addd9/dep-lib-atoi

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/atoi-2fbe13d0da7addd9/invoked.timestamp

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/atoi-2fbe13d0da7addd9/lib-atoi

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/atoi-2fbe13d0da7addd9/lib-atoi.json

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/axum-f31c1beaad54dcaf/dep-lib-axum

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/axum-f31c1beaad54dcaf/invoked.timestamp

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/axum-f31c1beaad54dcaf/lib-axum

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/axum-f31c1beaad54dcaf/lib-axum.json

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/bitflags-d927a6da6c681fe2/dep-lib-bitflags

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/bitflags-d927a6da6c681fe2/invoked.timestamp

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/bitflags-d927a6da6c681fe2/lib-bitflags

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/bitflags-d927a6da6c681fe2/lib-bitflags.json

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/byteorder-04b068faa2a5ce23/dep-lib-byteorder

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/byteorder-04b068faa2a5ce23/invoked.timestamp

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/byteorder-04b068faa2a5ce23/lib-byteorder

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/byteorder-04b068faa2a5ce23/lib-byteorder.json

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/chrono-48fe044009239925/dep-lib-chrono

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/chrono-48fe044009239925/invoked.timestamp

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/chrono-48fe044009239925/lib-chrono

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/chrono-48fe044009239925/lib-chrono.json

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/chrono-b5deb93e2a18c662/dep-lib-chrono

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/chrono-b5deb93e2a18c662/invoked.timestamp

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/chrono-b5deb93e2a18c662/lib-chrono

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/chrono-b5deb93e2a18c662/lib-chrono.json

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/convert_case-f9fa713d7efa15a0/dep-lib-convert_case

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/convert_case-f9fa713d7efa15a0/invoked.timestamp

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/convert_case-f9fa713d7efa15a0/lib-convert_case

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/convert_case-f9fa713d7efa15a0/lib-convert_case.json

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/crm-ai-f6bc192b1f678367/bin-crm-ai

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/crm-ai-f6bc192b1f678367/bin-crm-ai.json

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/cssparser-6a99fccaa94341b7/dep-lib-cssparser

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/cssparser-6a99fccaa94341b7/invoked.timestamp

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/cssparser-6a99fccaa94341b7/lib-cssparser

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/cssparser-6a99fccaa94341b7/lib-cssparser.json

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/cssparser-7a333e991dc08b1e/run-build-script-build-script-build

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/cssparser-7a333e991dc08b1e/run-build-script-build-script-build.json

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/cssparser-9dd379d9e78480f7/build-script-build-script-build

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/cssparser-9dd379d9e78480f7/build-script-build-script-build.json

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/cssparser-9dd379d9e78480f7/dep-build-script-build-script-build

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/cssparser-9dd379d9e78480f7/invoked.timestamp

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/cssparser-macros-3ce1523179154710/dep-lib-cssparser_macros

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/cssparser-macros-3ce1523179154710/invoked.timestamp

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/cssparser-macros-3ce1523179154710/lib-cssparser_macros

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/cssparser-macros-3ce1523179154710/lib-cssparser_macros.json

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/derive_more-7f90394860a0d849/dep-lib-derive_more

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/derive_more-7f90394860a0d849/invoked.timestamp

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/derive_more-7f90394860a0d849/lib-derive_more

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/derive_more-7f90394860a0d849/lib-derive_more.json

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/dtoa-000e5de12d31e902/dep-lib-dtoa

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/dtoa-000e5de12d31e902/invoked.timestamp

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/dtoa-000e5de12d31e902/lib-dtoa

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/dtoa-000e5de12d31e902/lib-dtoa.json

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/dtoa-short-9e6464d31e48404c/dep-lib-dtoa_short

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/dtoa-short-9e6464d31e48404c/invoked.timestamp

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/dtoa-short-9e6464d31e48404c/lib-dtoa_short

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/dtoa-short-9e6464d31e48404c/lib-dtoa_short.json

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/ego-tree-a34fe8ab0ae4273f/dep-lib-ego_tree

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/ego-tree-a34fe8ab0ae4273f/invoked.timestamp

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/ego-tree-a34fe8ab0ae4273f/lib-ego_tree

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/ego-tree-a34fe8ab0ae4273f/lib-ego_tree.json

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/futf-abd70e3c3cfa5c09/dep-lib-futf

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/futf-abd70e3c3cfa5c09/invoked.timestamp

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/futf-abd70e3c3cfa5c09/lib-futf

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/futf-abd70e3c3cfa5c09/lib-futf.json

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/fxhash-77af17bf874e92c5/dep-lib-fxhash

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/fxhash-77af17bf874e92c5/invoked.timestamp

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/fxhash-77af17bf874e92c5/lib-fxhash

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/fxhash-77af17bf874e92c5/lib-fxhash.json

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/getopts-d941d37a926cfd99/dep-lib-getopts

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/getopts-d941d37a926cfd99/invoked.timestamp

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/getopts-d941d37a926cfd99/lib-getopts

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/getopts-d941d37a926cfd99/lib-getopts.json

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/getrandom-056e185c68d2e605/build-script-build-script-build

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/getrandom-056e185c68d2e605/build-script-build-script-build.json

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/getrandom-056e185c68d2e605/dep-build-script-build-script-build

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/getrandom-056e185c68d2e605/invoked.timestamp

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/getrandom-08351592eeb37311/run-build-script-build-script-build

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/getrandom-08351592eeb37311/run-build-script-build-script-build.json

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/getrandom-14eaca28e4efc2d8/dep-lib-getrandom

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/getrandom-14eaca28e4efc2d8/invoked.timestamp

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/getrandom-14eaca28e4efc2d8/lib-getrandom

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/getrandom-14eaca28e4efc2d8/lib-getrandom.json

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/h2-38310e7a72de31f7/dep-lib-h2

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/h2-38310e7a72de31f7/invoked.timestamp

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/h2-38310e7a72de31f7/lib-h2

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/h2-38310e7a72de31f7/lib-h2.json

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/html5ever-2e2322b18a1f3aa0/dep-lib-html5ever

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/html5ever-2e2322b18a1f3aa0/invoked.timestamp

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/html5ever-2e2322b18a1f3aa0/lib-html5ever

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/html5ever-2e2322b18a1f3aa0/lib-html5ever.json

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/html5ever-a95569156868270d/run-build-script-build-script-build

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/html5ever-a95569156868270d/run-build-script-build-script-build.json

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/html5ever-b52e43f4cf12b414/build-script-build-script-build

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/html5ever-b52e43f4cf12b414/build-script-build-script-build.json

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/html5ever-b52e43f4cf12b414/dep-build-script-build-script-build

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/html5ever-b52e43f4cf12b414/invoked.timestamp

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/hyper-4453d79fd0e6fd06/dep-lib-hyper

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/hyper-4453d79fd0e6fd06/invoked.timestamp

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/hyper-4453d79fd0e6fd06/lib-hyper

BIN

Binary file not shown.

rust-ai/target/debug/.fingerprint/hyper-4453d79fd0e6fd06/lib-hyper.json

BIN

Binary file not shown.

Some files were not shown because too many files have changed in this diff Show More